CloudFront operations
Every CloudFront operation Overcast declares — 89 of 89 implemented — with status, behaviour notes and a link to the AWS API reference for each.
All 89 listed operations are implemented. Back to CloudFront.
Summary
| Category | ✅ Supported |
|---|---|
| Distributions | 7 |
| Invalidations | 3 |
| OAC / OAI | 11 |
| Tagging | 3 |
| Policies | 18 |
| Proxy | 1 |
| Functions | 8 |
| Keys & Crypto | 12 |
| Monitoring | 8 |
| FLE | 12 |
| Deployment | 6 |
Endpoints
Distributions
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
CreateDistribution | ✅ Supported | CallerReference idempotency; Status always “Deployed” | docs |
GetDistribution | ✅ Supported | Returns ETag header | docs |
GetDistributionConfig | ✅ Supported | Returns DistributionConfig portion + ETag | docs |
UpdateDistribution | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteDistribution | ✅ Supported | Requires If-Match + Enabled=false | docs |
ListDistributions | ✅ Supported | Marker/MaxItems pagination via serviceutil.Paginate | docs |
CreateDistributionWithTags | ✅ Supported | Creates distribution + tags atomically; custom_id tag support | docs |
Invalidations
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
CreateInvalidation | ✅ Supported | Supports path and tag invalidations (#tag); Status instantly “Completed” | docs |
GetInvalidation | ✅ Supported | Returns invalidation by distribution + invalidation ID | docs |
ListInvalidations | ✅ Supported | Marker/MaxItems pagination | docs |
OAC / OAI
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
CreateOriginAccessControl | ✅ Supported | Generates ID, returns ETag | docs |
GetOriginAccessControl | ✅ Supported | Returns OAC by ID with ETag | docs |
UpdateOriginAccessControl | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteOriginAccessControl | ✅ Supported | Requires If-Match ETag | docs |
ListOriginAccessControls | ✅ Supported | Marker/MaxItems pagination | docs |
CreateCloudFrontOriginAccessIdentity | ✅ Supported | CallerReference required; generates S3CanonicalUserId | docs |
GetCloudFrontOriginAccessIdentity | ✅ Supported | Returns OAI by ID with ETag | docs |
GetCloudFrontOriginAccessIdentityConfig | ✅ Supported | Returns config portion + ETag | docs |
UpdateCloudFrontOriginAccessIdentity | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteCloudFrontOriginAccessIdentity | ✅ Supported | Requires If-Match ETag | docs |
ListCloudFrontOriginAccessIdentities | ✅ Supported | Marker/MaxItems pagination | docs |
Tagging
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
ListTagsForResource | ✅ Supported | Returns tags by resource ARN | docs |
TagResource | ✅ Supported | Merges tags into existing set | docs |
UntagResource | ✅ Supported | Removes specified tag keys | docs |
Policies
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
CreateCachePolicy | ✅ Supported | Generates ID, returns ETag | docs |
GetCachePolicy | ✅ Supported | Returns policy by ID with ETag | docs |
GetCachePolicyConfig | ✅ Supported | Returns config portion + ETag | docs |
UpdateCachePolicy | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteCachePolicy | ✅ Supported | Requires If-Match ETag | docs |
ListCachePolicies | ✅ Supported | Marker/MaxItems pagination | docs |
CreateOriginRequestPolicy | ✅ Supported | Generates ID, returns ETag | docs |
GetOriginRequestPolicy | ✅ Supported | Returns policy by ID with ETag | docs |
GetOriginRequestPolicyConfig | ✅ Supported | Returns config portion + ETag | docs |
UpdateOriginRequestPolicy | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteOriginRequestPolicy | ✅ Supported | Requires If-Match ETag | docs |
ListOriginRequestPolicies | ✅ Supported | Marker/MaxItems pagination | docs |
CreateResponseHeadersPolicy | ✅ Supported | Generates ID, returns ETag | docs |
GetResponseHeadersPolicy | ✅ Supported | Returns policy by ID with ETag | docs |
GetResponseHeadersPolicyConfig | ✅ Supported | Returns config portion + ETag | docs |
UpdateResponseHeadersPolicy | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteResponseHeadersPolicy | ✅ Supported | Requires If-Match ETag | docs |
ListResponseHeadersPolicies | ✅ Supported | Marker/MaxItems pagination | docs |
Proxy
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
ProxyRequest | ✅ Supported | Emulator extension: path-pattern matching, origin forwarding (dialled locally when Overcast answers for the origin), GET response caching, CloudFront Functions, origin-group failover, geo restriction and custom error responses | docs |
Functions
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
CreateFunction | ✅ Supported | Stores code + config; Stage=DEVELOPMENT; returns ETag | docs |
DescribeFunction | ✅ Supported | Returns FunctionSummary with metadata | docs |
GetFunction | ✅ Supported | Returns raw function code (base64) with ETag | docs |
UpdateFunction | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteFunction | ✅ Supported | Requires If-Match ETag | docs |
ListFunctions | ✅ Supported | Filters by Stage query param; MaxItems pagination | docs |
TestFunction | ✅ Supported | Returns a fixed success result without running the code; a function attached to a behaviour does execute on requests through the distribution | docs |
PublishFunction | ✅ Supported | Promotes DEVELOPMENT → LIVE stage | docs |
Keys & Crypto
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
CreateKeyGroup | ✅ Supported | Generates ID, returns ETag | docs |
GetKeyGroup | ✅ Supported | Returns key group by ID with ETag | docs |
GetKeyGroupConfig | ✅ Supported | Returns config portion + ETag | docs |
UpdateKeyGroup | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteKeyGroup | ✅ Supported | Requires If-Match ETag | docs |
ListKeyGroups | ✅ Supported | MaxItems pagination | docs |
CreatePublicKey | ✅ Supported | CallerReference dedup; generates ID + ETag | docs |
GetPublicKey | ✅ Supported | Returns public key by ID with ETag | docs |
GetPublicKeyConfig | ✅ Supported | Returns config portion + ETag | docs |
UpdatePublicKey | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeletePublicKey | ✅ Supported | Requires If-Match ETag | docs |
ListPublicKeys | ✅ Supported | MaxItems pagination | docs |
Monitoring
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
CreateMonitoringSubscription | ✅ Supported | Per-distribution; requires existing distribution | docs |
GetMonitoringSubscription | ✅ Supported | Returns subscription by distribution ID | docs |
DeleteMonitoringSubscription | ✅ Supported | Removes subscription for distribution | docs |
CreateRealtimeLogConfig | ✅ Supported | Name-based; generates ARN; duplicate name check | docs |
GetRealtimeLogConfig | ✅ Supported | Lookup by Name or ARN in request body | docs |
UpdateRealtimeLogConfig | ✅ Supported | Updates by Name in request body | docs |
DeleteRealtimeLogConfig | ✅ Supported | Deletes by Name or ARN in request body | docs |
ListRealtimeLogConfigs | ✅ Supported | MaxItems pagination | docs |
FLE
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
CreateFieldLevelEncryptionConfig | ✅ Supported | CallerReference required; generates ID | docs |
GetFieldLevelEncryption | ✅ Supported | Returns FLE config by ID with ETag | docs |
GetFieldLevelEncryptionConfig | ✅ Supported | Returns config portion + ETag | docs |
UpdateFieldLevelEncryptionConfig | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteFieldLevelEncryption | ✅ Supported | Requires If-Match ETag | docs |
ListFieldLevelEncryptionConfigs | ✅ Supported | MaxItems pagination | docs |
CreateFieldLevelEncryptionProfile | ✅ Supported | CallerReference required; generates ID | docs |
GetFieldLevelEncryptionProfile | ✅ Supported | Returns FLE profile by ID with ETag | docs |
GetFieldLevelEncryptionProfileConfig | ✅ Supported | Returns config portion + ETag | docs |
UpdateFieldLevelEncryptionProfile | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteFieldLevelEncryptionProfile | ✅ Supported | Requires If-Match ETag | docs |
ListFieldLevelEncryptionProfiles | ✅ Supported | MaxItems pagination | docs |
Deployment
| Operation | Status | Notes | AWS Docs |
|---|---|---|---|
CreateContinuousDeploymentPolicy | ✅ Supported | Generates ID, returns ETag | docs |
GetContinuousDeploymentPolicy | ✅ Supported | Returns policy by ID with ETag | docs |
GetContinuousDeploymentPolicyConfig | ✅ Supported | Returns config portion + ETag | docs |
UpdateContinuousDeploymentPolicy | ✅ Supported | Requires If-Match ETag; bumps version | docs |
DeleteContinuousDeploymentPolicy | ✅ Supported | Requires If-Match ETag | docs |
ListContinuousDeploymentPolicies | ✅ Supported | MaxItems pagination | docs |
Related
- CloudFront — quick start, what works, and the differences from AWS
- All service pages