Amazon CloudFront now supports the request header order and header count headers
News
Amazon CloudFront has introduced two new headers to help customers enhance request security and pattern detection:
- "Cloudfront-viewer-header-order" shows the order of HTTP headers sent with a request
- "Cloudfront-viewer-header-count" indicates the total number of headers in the request
- These headers help detect potential request spoofing attempts
- Can be used with AWS WAF access control rules and custom origin server logic
- Available immediately in all CloudFront edge locations at no additional cost
By comparing header order and count against expected patterns, customers can add an extra layer of request verification and potentially block suspicious traffic.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Feb 23
2026
2026
Adding HTTP security headers using Amazon CloudFront
Mar 29
2023
2023
Amazon CloudFront announces support for HTTP status and response generation using CloudFront Functions
Jul 1
2025
2025
Amazon CloudFront announces support for HTTPS DNS records
Apr 1
2026
2026
Amazon CloudFront now supports SHA-256 for signed URLs and signed cookies
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.