I found this link for setting up the cloud front on Amazon
but I can see by all the new options that this link is old
and partially relevant it seems
http://www.instanttvchannel.com/roku/cloudfrontpublic:
Origin Settings_________Origin Domain Name:mastersdbg.s3.amazonaws.com
Origin Path
Origin ID: vS3-mastersdbg
Restrict Bucket Access
YesNo
Origin Access Identity
Create a New Identity: (What is the identity, maybe 1st cloud?)
Use an Existing Identity
Comment
Grant Read Permissions on Bucket
Yes, Update Bucket Policy
Yes I Will Update Permissions
Default Cache Behavior Settings____________Path PatternDefault (*)
Viewer Protocol PolicyHTTP and HTTPS (would this be Both HTTP and HTTPS?)
Redirect HTTP to HTTPS
HTTPS Only
Allowed HTTP MethodsGET, HEAD
GET, HEAD, OPTIONS
GET, HEAD, OPTIONS, PUT, POST, PATCH, DELETE
Cached HTTP Methods
GET, HEAD (Cached by default)
Forward Headers This is set to none?
None (Improves Caching)
Object Caching: set to, Use Origin Cache Headers
Customize
Minimum TTL (this is set to 0)
Forward Cookies: set to , None (Improves Caching)
Forward Query Strings: set to No (Improves Caching)
Yes
Smooth Streaming: This is set to no, but I am guessing it must be yes)
Yes
No
Restrict Viewer Access: This is set to No
(Use Signed URLs or
Signed Cookies)
Yes
No
Distribution Settings_______Price Class
Use All Edge Locations (Best Performance)? or just US and Europe
Alternate Domain Names, Does using this work to my advantage?
(CNAMEs)
SSL Certificate
Default CloudFront Certificate (*.cloudfront.net)
Choose this option if you want your users to use HTTPS or HTTP to access your content with the CloudFront domain name (such as https://d111111abcdef8.cloudfront.net/logo.jpg).
Important: If you choose this option, CloudFront requires that browsers or devices support TLSv1 or later to access your content.Custom SSL Certificate (stored in AWS IAM):No certificates available
Choose this option if you want your users to use HTTPS to access your content with an alternate domain name (such as https://www.example.com/logo.jpg) using either dedicated CloudFront IP addresses or SNI.
To choose this option, you first need to upload your certificate to the AWS IAM certificate store (the -path parameter must start with /cloudfront/).
Learn MoreDefault Root Object: Not Sure what this is
Logging, I am guessing this is the server logs?
On
Off
Bucket for Logs ?
Log Prefix
Cookie Logging
On
Off
Comment:
Distribution State: I am sure this has to be enabled
Enabled
Disabled