Amazon CloudFront now provides viewer ISP and post-quantum TLS details

Amazon CloudFront Updates
Amazon CloudFront now supports forwarding two new optional headers to your origin: CloudFront-Viewer-ISP and CloudFront-Viewer-TLS-Details. These headers provide visibility into the viewer's network and TLS connection details, respectively.
CloudFront-Viewer-ISP
This header contains the name of the viewer's internet service provider (ISP), allowing you to analyze traffic and performance by network and isolate unusual traffic from a single provider.
CloudFront-Viewer-TLS-Details
This header includes the key exchange, signature scheme, and signature public key type for each connection, enabling you to measure the share of viewers using post-quantum cryptography (PQC) and identify clients that do not yet use it.
What to do
- Add the desired headers to an origin request policy.
- Attach the policy to your CloudFront distribution.
Source: AWS release notes
If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.



