- Newest
- Most votes
- Most comments
The geographic restriction feature in CloudFront should be available under the Security tab of your CloudFront distribution settings. If you're not seeing this option, here are a few things to check:
-
Verify you're in the correct location: Make sure you're viewing the settings for a CloudFront distribution specifically, not another AWS service. The geographic restriction feature is a CloudFront-specific capability.
-
Check your IAM permissions: Ensure your IAM user or role has the necessary permissions to view and modify CloudFront distribution settings. You may need permissions like
cloudfront:GetDistributionandcloudfront:UpdateDistribution. -
Console view: The geographic restriction settings are typically found under the "Security" tab when editing a CloudFront distribution. If you're using an older version of the AWS Console or if there have been recent UI changes, the location might have shifted slightly.
-
Distribution type: Confirm you're working with a standard CloudFront distribution. The feature applies uniformly across the entire distribution and all cache behaviors.
If you've verified all of these items and still don't see the option, you may want to try refreshing your browser, clearing your cache, or accessing the console from a different browser to rule out any display issues.
Sources
Implementing ingress geo-restriction with AWS to reduce attack surface | Networking & Content Delivery
Relevant content
asked 2 years ago
- AWS OFFICIALUpdated a year ago
I’m seeing the same behavior. In the CloudFront v4 console, Geographic restrictions is visible under the Security tab for an existing distribution in another account, but it is missing for a newly created standard CloudFront distribution in my personal account. I’m verifying this with an IAM user that has Administrator permissions, so it does not seem to be a permissions issue.