Amazon CloudFront now provides viewer ISP and post-quantum TLS details

Published
October 30, 2026
https://aws.amazon.com/about-aws/whats-new/2026/10/cloudfront-viewer-isp-post-quantum-visbility/

Amazon CloudFront Updates

Amazon CloudFront now supports forwarding two new optional headers to your origin: CloudFront-Viewer-ISP and CloudFront-Viewer-TLS-Details. These headers provide visibility into the viewer's network and TLS connection details, respectively.

CloudFront-Viewer-ISP

This header contains the name of the viewer's internet service provider (ISP), allowing you to analyze traffic and performance by network and isolate unusual traffic from a single provider.

CloudFront-Viewer-TLS-Details

This header includes the key exchange, signature scheme, and signature public key type for each connection, enabling you to measure the share of viewers using post-quantum cryptography (PQC) and identify clients that do not yet use it.

What to do

  • Add the desired headers to an origin request policy.
  • Attach the policy to your CloudFront distribution.

Source: AWS release notes




If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.

Follow our blog

Get the latest insights and advice on AWS services from our experts.

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.