cloudfront

An agent skill by aws, from aws/agent-toolkit-for-aws. Tags: cdn, cloud, logs, security, web.

What it does

Configures Amazon CloudFront content delivery across six workflows: when to use CloudFront and how it fits with AWS WAF, Shield, CloudFront Functions, Lambda@Edge, Route 53, and origins (creating a distribution, caching, and Flat Rate Pricing (FRP) versus pay-as-you-go pricing); managing custom-domain TLS certificates (ACM in us-east-1); configuring multi-tenant distributions; protecting origins with origin access control (OAC), VPC origins, and origin mutual TLS (mTLS); securing content with signed URLs and cookies, geographic restrictions, viewer mutual TLS, and edge token validation; and observing traffic with standard and real-time logs. Applicable when the customer wants to put CloudFront in front of content, choose pricing, lock an origin, restrict who can view content, or analyze logs. Not applicable for the Route 53 DNS side of a CloudFront custom domain or failover between distributions (see the route53-cloudfront skill), or for pure-Route 53 DNS work (see the route53 skill).

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add aws/agent-toolkit-for-aws --skill cloudfront

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/aws/agent-toolkit-for-aws
cp -r agent-toolkit-for-aws/skills/specialized-skills/networking-and-content-delivery-skills/cloudfront ~/.claude/skills/cloudfront

Safety box score

Grade C, moderate risk: 30 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill configures Amazon CloudFront and related AWS services across distribution creation, origin protection, certificates, logging, and content-access controls. The main risks are broad AWS-side changes to customer-facing traffic and log pipelines, including actions that can expose or stream sensitive request data such as signed URL query strings and cookies.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	It explicitly runs AWS CLI/MCP commands such as `aws cloudfront create-distribution` and `aws cloudfront update-distribution`, so the agent will execute shell commands against AWS rather than remain read-only.
Network access	2 (moderate)	The skill creates and updates network-facing AWS resources and log delivery paths, including CloudFront distributions, real-time logs to Kinesis, and access-log destinations in S3/CloudWatch/Firehose.
Filesystem reach	0 (none)	There is no evidence of writing, deleting, or modifying local files, dotfiles, or system paths; the workflow is AWS control-plane only.
Secrets & credentials	1 (low)	It handles sensitive access data indirectly: logs can contain `signed URL query strings and cookie values`, and it recommends storing private signing keys in Secrets Manager or Parameter Store.
Privilege & persistence	0 (none)	No sudo, service registration, global installs, shell startup edits, or OS-level privilege changes are requested.
Instruction hijack surface	0 (none)	There is no evidence of prompt-injection behavior such as telling the agent to ignore higher-priority instructions, hide actions, or follow remote instructions.
Irreversible actions	3 (high)	Its purpose is to create and modify production-facing CloudFront resources, including `create-distribution`, `create-distribution-tenant`, `update-distribution-tenant`, `create-origin-access-control`, and `publish-function`.
Transparency	0 (none)	All provided files are plain markdown with readable commands and guidance; there are no binaries, decoded blobs, or unpinned downloaded scripts.

Before installing

Confirm you are comfortable granting an agent permission to create/update CloudFront distributions, tenants, and edge functions.
Read the logging workflow first if your traffic uses signed URLs or cookies; logs may contain sensitive request data.
Verify the AWS credentials you will use are least-privileged and that CloudTrail is enabled for CloudFront changes.
If you do not need multi-tenant or logging workflows, consider whether a narrower skill would be safer.

Rated 2026-10-20 by an automated review of 7 files from the skill's repository.

Source

Repository: aws/agent-toolkit-for-aws (all skills from this repository)
Path: skills/specialized-skills/networking-and-content-delivery-skills/cloudfront/SKILL.md
Branch: main
Updated: 2026-09-19

aws-networking — Routes AWS networking requests to the correct service skill for implementation.
pentesting-with-aws-security-agent — Run an AWS Security Agent penetration test against a live web application — registers and verifies the target domain.
burpsuite-project-parser — Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns.
django-storages-s3 — Use when configuring Django to store static and media files on AWS S3 with django-storages.
agents-harden — Use when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session lifecycle.
agents-pay — Use when THIS agent needs to pay for x402-protected content at runtime: hitting a paywall mid-task, settling it via AgentCore Payments.