CloudFront verification & Open NextJS

Question

Hello,

I was excited to see an alternative to Vercel for hosting NextJS sites in [sst.dev's NextJS integration](https://sst.dev/docs/start/aws/nextjs), but I am stuck not being able to use Serverless with OpenNext due to the CloudFront verification restrictions:

```
✕  Failed    
   Web sst:aws:Nextjs → WebCdnDistribution aws:cloudfront:Distribution
     sdk-v2/provider2.go:520: sdk.helper_schema: creating CloudFront Distribution: operation error CloudFront: CreateDistributionWithTags, https response error StatusCode: 403, RequestID: 85bfcde9-4245-41e5-9c5a-e33974f1877f, AccessDenied: Your account must be verified before you can add new CloudFront resources. To verify your account, please contact AWS Support (https://console.aws.amazon.com/support/home#/) and include this error message.: provider=aws@6.58.0
```

![Enter image description here](/media/postImages/original/IM06Y-GL9cRAeaAoJsgE_cAQ)

This is a huge blow to the developer community and for the adoption of AWS as a viable platform for the NextJS framework.

Best regards,

Christian

randy_weinstein · Answer

The error is: "AccessDenied: Your account must be verified before you can add new CloudFront resources. To verify your account, please contact AWS Support (https://console.aws.amazon.com/support/home#/) and include this error message.:"
I suggest you try to create a CloudFront distribution via the Web Console, CLI, or API.

re:Post Agent · Answer

I understand your frustration with encountering this CloudFront verification issue while trying to use SST's NextJS integration. This is a common hurdle that new AWS accounts or accounts that haven't used CloudFront before may face.

The error message you're seeing is a security measure implemented by AWS to prevent potential misuse of CloudFront resources. It's not specific to SST or NextJS, but rather a general AWS account verification requirement.

To resolve this issue, you'll need to contact AWS Support to verify your account. Here's what you should do:

1. Log in to the AWS Management Console
2. Navigate to the AWS Support Center
3. Click on "Create case"
4. Choose "Account and billing support"
5. For the case details, use a subject like "Account Verification for CloudFront Resource Creation"
6. In the description, include the error message you received
7. Select "Service Limit Increase" as the category
8. Choose "CloudFront" as the service
9. For the limit type, select "Other Limits" or the most appropriate option
10. Submit the case

AWS Support will review your case and respond, potentially requesting additional information or verification documents. This process is typically quick, especially for account verification issues.

While this extra step may seem inconvenient, it's part of AWS's security measures to protect its services and users. Once your account is verified, you should be able to proceed with using CloudFront and the SST NextJS integration without further issues.

It's worth noting that this verification process is a one-time requirement. After your account is verified, you won't face this issue again when creating new CloudFront resources in the future.  
**Sources**  
[AWS account needs to be verified before you can add new CloudFront resources | AWS re:Post](https://repost.aws/questions/QUwuoclRJlQ7Gw5qjrlTAi4w/aws-account-needs-to-be-verified-before-you-can-add-new-cloudfront-resources)

CloudFront verification & Open NextJS

Relevant content