Is custom condition supported in the AWS cloud front policy?

Question

In AWS cloud front, for private content delivery there are two options:

1. Signed URL
2. Signed Cookies

In custom policy inside the statement they have defined:

    {
"Statement": [
      {
         "Resource":"URL or stream name of the object",
         "Condition":{
            "DateLessThan":{"AWS:EpochTime":required ending date and time in Unix time format and UTC},
            "DateGreaterThan":{"AWS:EpochTime":optional beginning date and time in Unix time format and UTC},
            "IpAddress":{"AWS:SourceIp":"optional IP address"}
         }
      }
   ]
}

In the condition they talk about only 3 types of condition settings.

My question is - Are custom policy possible here? Say pass a string token and validate if that token is?

Answer 1

My question is - Are custom policy possible here? Say pass a string token and validate if that token is?

This is not currently possible . According to the documentation only the following fields are allowed inside the policy (Since this is not an IAM policy)

• Rosource
• DateLessThan
• DateGreaterThan (Optional)
• IpAddress (Optional)