4 ms·
afaik cloudfront TLS certs and access logs S3 buckets must be stored in us-east-1
by nothrabannosir 1y ago
afaik cloudfront TLS certs and access logs S3 buckets must be stored in us-east-1
- mlhpdx 1y agoTrue for certs but not the log bucket (but it’s still going to be in a single region, just doesn’t have to be Virginia). I’m guessing those certs are cached where needed, but I can also imagine a perfect storm where I’m unable to rotate them due to an outage. I prefer the API Gateway model where I can create regional endpoints and sew them together in DNS.