{"id":10255,"date":"2025-03-14T10:17:57","date_gmt":"2025-03-14T01:17:57","guid":{"rendered":"https:\/\/ci.clara.jp\/media\/?p=10255"},"modified":"2025-09-29T12:34:19","modified_gmt":"2025-09-29T03:34:19","slug":"%e3%80%902025%e5%b9%b4%e6%9c%80%e6%96%b0%e3%80%91aws-lambdaedge-%e3%81%a7-cloudfront-%e3%82%92%e3%82%ab%e3%82%b9%e3%82%bf%e3%83%9e%e3%82%a4%e3%82%ba%ef%bc%81403%e3%82%a8%e3%83%a9%e3%83%bc%e5%af%be","status":"publish","type":"post","link":"https:\/\/ci.clara.jp\/media\/?p=10255","title":{"rendered":"\u30102025\u5e74\u6700\u65b0\u3011AWS Lambda@Edge \u3067 CloudFront \u3092\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\uff01403\u30a8\u30e9\u30fc\u5bfe\u7b56\u3068\u5b9f\u88c5\u30ac\u30a4\u30c9"},"content":{"rendered":"\n

\u3053\u3093\u306b\u3061\u306f\uff01TAM\u306e\u77f3\u5ddd\u3067\u3059\u3002<\/span>
<\/span>\u307f\u306a\u3055\u3093\u306f\u3001AWS\u306eCloudFront\u3092\u4f7f\u3063\u3066\u3044\u307e\u3059\u304b\uff1f <\/span><\/p>\n\n\n\n

AWS CloudFront \u3092\u6d3b\u7528\u3057\u3066\u3044\u308b\u3068\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u304c <\/span>403 Forbidden<\/b> \u306b\u306a\u3063\u305f\u308a\u3001\u3088\u308a\u67d4\u8edf\u306a\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u304c\u5fc5\u8981\u306b\u306a\u3063\u305f\u308a\u3059\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u3088\u306d\u3002\u305d\u3093\u306a\u3068\u304d\u306b\u5f79\u7acb\u3064\u306e\u304c <\/span>Lambda@Edge<\/b> \u3067\u3059\uff01<\/span><\/p>\n\n\n\n

\u672c\u8a18\u4e8b\u3067\u306f\u3001Lambda@Edge \u306e\u57fa\u672c\u7684\u306a\u4f7f\u3044\u65b9\u304b\u3089\u3001CloudFront \u306e <\/span>403\u30a8\u30e9\u30fc\u3092\u56de\u907f\u3059\u308b\u5b9f\u88c5\u65b9\u6cd5<\/b> \u307e\u3067\u3001\u30b9\u30c6\u30c3\u30d7\u3054\u3068\u306b\u89e3\u8aac\u3057\u3066\u3044\u304d\u307e\u3059\u3002\u307e\u305f\u3001<\/span>CloudFront Functions \u3068\u306e\u9055\u3044<\/b> \u306b\u3064\u3044\u3066\u3082\u89e6\u308c\u306a\u304c\u3089\u3001\u3069\u3061\u3089\u3092\u9078\u3076\u3079\u304d\u304b\u8ff7\u308f\u306a\u3044\u3088\u3046\u306b\u30b5\u30dd\u30fc\u30c8\u3057\u307e\u3059\u3002<\/span><\/p>\n\n\n\n

CloudFront \u3092\u3088\u308a\u30d1\u30ef\u30d5\u30eb\u306b\u4f7f\u3044\u3053\u306a\u3057\u305f\u3044\u65b9\u306f\u3001\u305c\u3072\u6700\u5f8c\u307e\u3067\u3054\u89a7\u304f\u3060\u3055\u3044\uff01<\/span><\/p>\n\n\n\n

Lambda@Edge\u3068\u306f\uff1fCloudFront Functions\u3068\u306e\u9055\u3044\u3092\u5fb9\u5e95\u6bd4\u8f03<\/span><\/h2>\n\n\n\n

AWS \u306e CloudFront \u3092\u6d3b\u7528\u3059\u308b\u969b\u306b\u3001\u300c\u75d2\u3044\u6240\u306b\u624b\u304c\u5c4a\u304f\u300d\u6a5f\u80fd\u3068\u3057\u3066\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u306e\u304c <\/span>Lambda@Edge<\/b> \u3067\u3059\u3002
\u3055\u3089\u306b\u8fd1\u5e74\u3067\u306f <\/span>CloudFront Functions<\/b> \u3082\u767b\u5834\u3057\u3001CloudFront \u306e\u30c8\u30ea\u30ac\u30fc\u3092\u6d3b\u7528\u3057\u305f\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u304c\u3088\u308a\u67d4\u8edf\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/span><\/p>\n\n\n\n

\u672c\u8a18\u4e8b\u3067\u306f\u3001Lambda@Edge \u306e\u57fa\u672c\u7684\u306a\u4f7f\u3044\u65b9\u3092\u7d39\u4ecb\u3057\u3001\u7279\u306b <\/span>\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\uff08DirectoryIndex\uff09\u3092 CloudFront \u3067\u5b9f\u73fe\u3059\u308b\u65b9\u6cd5<\/b> \u306b\u3064\u3044\u3066\u89e3\u8aac\u3057\u307e\u3059\u3002<\/span><\/p>\n\n\n\n

Lambda@Edge vs CloudFront Functions\uff5c\u3069\u3061\u3089\u3092\u4f7f\u3046\u3079\u304d\uff1f<\/strong><\/h2>\n\n\n\n
\u7279\u6027<\/b><\/th>Lambda@Edge<\/b><\/th>CloudFront Functions<\/b><\/th><\/tr>
\u5bfe\u5fdc\u30d7\u30ed\u30b0\u30e9\u30e0\u8a00\u8a9e<\/b><\/td>Python 3.13, Node.js<\/span><\/td>JavaScript\uff08KeyValueStore\u30b5\u30dd\u30fc\u30c8\uff09<\/span><\/td><\/tr>
\u9069\u7528\u30bf\u30a4\u30df\u30f3\u30b0<\/b><\/td>\u30d3\u30e5\u30fc\u30ef\u30fc\u30ea\u30af\u30a8\u30b9\u30c8\u3001\u30aa\u30ea\u30b8\u30f3\u30ea\u30af\u30a8\u30b9\u30c8\u3001\u30aa\u30ea\u30b8\u30f3\u30ec\u30b9\u30dd\u30f3\u30b9\u3001\u30d3\u30e5\u30fc\u30ef\u30fc\u30ec\u30b9\u30dd\u30f3\u30b9<\/span><\/td>\u30d3\u30e5\u30fc\u30ef\u30fc\u30ea\u30af\u30a8\u30b9\u30c8\u3001\u30d3\u30e5\u30fc\u30ef\u30fc\u30ec\u30b9\u30dd\u30f3\u30b9<\/span><\/td><\/tr>
\u95a2\u6570\u8a2d\u7f6e\u5834\u6240<\/b><\/td>\u30d0\u30fc\u30b8\u30cb\u30a2\u5317\u90e8 (us-east-1)<\/span><\/td>CloudFront \u8a2d\u5b9a\u753b\u9762\u304b\u3089\u76f4\u63a5\u6307\u5b9a<\/span><\/td><\/tr>
\u4e3b\u306a\u7528\u9014<\/b><\/td>A\/B \u30c6\u30b9\u30c8\u3001\u30ec\u30b9\u30dd\u30f3\u30b9\u30d8\u30c3\u30c0\u30fc\u306e\u5909\u66f4\u3001\u30b3\u30f3\u30c6\u30f3\u30c4\u306e\u52d5\u7684\u914d\u4fe1<\/span><\/td>HTTP \u30ea\u30af\u30a8\u30b9\u30c8\u306e\u5909\u66f4\u3001\u30ec\u30b9\u30dd\u30f3\u30b9\u306e\u5909\u66f4\u3001\u52d5\u7684\u30aa\u30ea\u30b8\u30f3\u9078\u629e<\/span><\/td><\/tr>
\u30ea\u30af\u30a8\u30b9\u30c8\u30dc\u30c7\u30a3\u306e\u30a2\u30af\u30bb\u30b9<\/b><\/td>\u53ef<\/span><\/td>\u4e0d\u53ef<\/span><\/td><\/tr>
\u51e6\u7406\u6642\u9593\uff08\u30bf\u30a4\u30e0\u30a2\u30a6\u30c8\uff09<\/b><\/td>5\u79d2<\/span><\/td>1\u30df\u30ea\u79d2<\/span><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

CloudFront Functions\u306f\u30b7\u30f3\u30d7\u30eb\u306a\u51e6\u7406\u306b\u5411\u3044\u3066\u3044\u307e\u3059\u304c\u3001 \u300c\u30ea\u30af\u30a8\u30b9\u30c8\u30dc\u30c7\u30a3\u3092\u89e6\u308a\u305f\u3044\u300d\u300c\u52d5\u7684\u306a\u30ec\u30b9\u30dd\u30f3\u30b9\u3092\u4f5c\u308a\u305f\u3044\u300d\u3068\u3044\u3063\u305f\u5834\u5408\u306f Lambda@Edge\u3092\u9078\u3076\u306e\u304c\u6b63\u89e3\u3067\u3059\uff01<\/span><\/p>\n\n\n\n\n\n\n\n

\u3010\u5b9f\u8df5\u3011Lambda@Edge\u3067CloudFront\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3092\u5b9f\u88c5\u3059\u308b<\/b><\/h2>\n\n\n\n

CloudFront\u306e\u300c403 Forbidden\u300d\u554f\u984c\u3068\u306f\uff1f<\/b><\/h3>\n\n\n\n

CloudFront \u7d4c\u7531\u3067\u30aa\u30ea\u30b8\u30f3\u304c S3 \u306e\u5834\u5408\u3001\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068 <\/span>\u300c403 Forbidden\u300d<\/b> \u304c\u767a\u751f\u3059\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u306f\u3001CloudFront \u304c <\/span>\/<\/span> \u3060\u3051\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u305d\u306e\u307e\u307e\u30aa\u30ea\u30b8\u30f3\u306b\u8ee2\u9001\u3059\u308b\u305f\u3081\u3001\u9069\u5207\u306a\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u304c\u898b\u3064\u304b\u3089\u306a\u3044\u305f\u3081\u3067\u3059\u3002<\/span><\/p>\n\n\n\n

\u4f8b\u3048\u3070\uff1a<\/span><\/p>\n\n\n\n

https:\/\/example.com\/aaa<\/code><\/pre><\/div>\n\n\n\n
\u3053\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u304c S3 \u306b\u8ee2\u9001\u3055\u308c\u308b\u3068\u3001<\/span>aaa\/<\/span> \u3068\u3044\u3046\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u306f\u5b58\u5728\u305b\u305a\u3001\u30a8\u30e9\u30fc\u304c\u767a\u751f\u3057\u307e\u3059\u3002<\/span><\/p>\n\n\n\n
\u3053\u306e\u554f\u984c\u3092\u89e3\u6c7a\u3059\u308b\u305f\u3081\u306b\u3001Lambda@Edge \u3092\u6d3b\u7528\u3057\u3001\u30ea\u30af\u30a8\u30b9\u30c8\u3055\u308c\u305f URI \u306e\u672b\u5c3e\u304c <\/span>\/<\/span> \u306e\u5834\u5408\u306b <\/span>index.html<\/span> \u3092\u4ed8\u4e0e\u3059\u308b\u51e6\u7406\u3092\u5b9f\u88c5\u3057\u307e\u3059\u3002<\/span><\/p>\n\n\n\n
\u3010\u8a2d\u5b9a\u30ac\u30a4\u30c9\u3011Lambda@Edge \u306e\u5c0e\u5165\u65b9\u6cd5<\/b><\/h2>\n\n\n\n
Lambda@Edge \u306e\u5b9f\u884c\u30ed\u30fc\u30eb\u3092\u4f5c\u6210\u3059\u308b<\/b><\/h3>\n\n\n\n
Lambda@Edge \u3092\u5b9f\u884c\u3059\u308b\u305f\u3081\u306b\u3001\u4ee5\u4e0b\u306e IAM \u30dd\u30ea\u30b7\u30fc\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002<\/span><\/p>\n\n\n\n
\n
{\n\n\u00a0\u00a0\u00a0\u00a0\"Version\": \"2012-10-17\",\n\n\u00a0\u00a0\u00a0\u00a0\"Statement\": [\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"Effect\": \"Allow\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"Action\": \"logs:CreateLogGroup\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"Resource\": \"arn:aws:logs:us-east-1:703056629600:*\"\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0},\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0{\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"Effect\": \"Allow\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"Action\": [\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"logs:CreateLogStream\",\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"logs:PutLogEvents\"\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0],\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\"Resource\": \"arn:aws:logs:us-east-1:703056629600:log-group:\/aws\/lambda\/*:*\"\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0}\n\n\u00a0\u00a0\u00a0\u00a0]\n\n}<\/code><\/pre>\n<\/div>\n\n\n\n
Lambda@Edge \u306e\u95a2\u6570\u30b3\u30fc\u30c9\u3092\u4f5c\u6210\u3059\u308b<\/b><\/h3>\n\n\n\n
\n
import json\n\nimport re\n\n\n\n\ndef lambda_handler(event, context):\n\n    request = event[\"Records\"][0][\"cf\"][\"request\"]\n\n    uri = request[\"uri\"]\n\n    \n\n    if uri.endswith(\"\/\"):\n\n        uri += \"index.html\"\n\n    elif not re.search(r'\\.', uri):\n\n        uri += \"\/index.html\"\n\n    \n\n    request[\"uri\"] = uri\n\n    return request<\/code><\/pre>\n<\/div>\n\n\n\n
CloudFront \u306b Lambda@Edge \u3092\u9069\u7528\u3059\u308b<\/b><\/h3>\n\n\n\n
Lambda \u3092\u4f5c\u6210\u3057\u305f\u3089\u3001CloudFront \u306e <\/span>\u30d3\u30d8\u30a4\u30d3\u30a2\u8a2d\u5b9a<\/b> \u3067\u300c\u30d3\u30e5\u30fc\u30ef\u30fc\u30ea\u30af\u30a8\u30b9\u30c8\u300d\u306e\u30c8\u30ea\u30ac\u30fc\u306b\u9069\u7528\u3057\u307e\u3059\u3002<\/span><\/p>\n\n\n\n
\u6ce8\u610f:<\/b> Lambda@Edge \u3092 CloudFront \u306b\u9069\u7528\u3059\u308b\u969b\u306f\u3001\u95a2\u6570\u306e <\/span>\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u767a\u884c<\/b> \u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u30a8\u30a4\u30ea\u30a2\u30b9\u3067\u306f\u306a\u304f\u3001\u30d0\u30fc\u30b8\u30e7\u30f3\u756a\u53f7 (<\/span>$LATEST<\/span> \u3067\u306f\u306a\u3044) \u3092\u6307\u5b9a\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/span><\/p>\n\n\n\n
\u3010\u691c\u8a3c\u3011Lambda@Edge \u306e\u30c6\u30b9\u30c8\u3068\u52d5\u4f5c\u78ba\u8a8d<\/b><\/h2>\n\n\n\n
\u30c6\u30b9\u30c8\u7528\u30a4\u30d9\u30f3\u30c8\uff08JSON\uff09<\/b><\/h3>\n\n\n\n
\u4ee5\u4e0b\u306e JSON \u3092\u30c6\u30b9\u30c8\u30a4\u30d9\u30f3\u30c8\u3068\u3057\u3066 Lambda \u306e\u30c6\u30b9\u30c8\u3092\u5b9f\u65bd\u3067\u304d\u307e\u3059\u3002<\/span><\/p>\n\n\n\n
\n
{\n\n  \"Records\": [\n\n    {\n\n      \"cf\": {\n\n        \"config\": {\n\n          \"distributionDomainName\": \"d111111abcdef8.cloudfront.net\",\n\n          \"eventType\": \"viewer-request\"\n\n        },\n\n        \"request\": {\n\n          \"clientIp\": \"203.0.113.178\",\n\n          \"uri\": \"\/\",\n\n          \"method\": \"GET\",\n\n          \"headers\": {\n\n            \"host\": [\n\n              { \"key\": \"Host\", \"value\": \"d111111abcdef8.cloudfront.net\" }\n\n            ]\n\n          }\n\n        }\n\n      }\n\n    }\n\n  ]\n\n}<\/code><\/pre>\n<\/div>\n\n\n\n
\u3010\u307e\u3068\u3081\u3011Lambda@Edge \u3092\u6d3b\u7528\u3057\u3066CloudFront\u3092\u6700\u9069\u5316\u3057\u3088\u3046<\/b><\/h2>\n\n\n\n
\u672c\u8a18\u4e8b\u3067\u306f\u3001Lambda@Edge \u3092\u6d3b\u7528\u3057\u3066 CloudFront \u3067\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3092\u5b9f\u73fe\u3059\u308b\u65b9\u6cd5\u3092\u7d39\u4ecb\u3057\u307e\u3057\u305f\u3002<\/span><\/p>\n\n\n\n
Lambda@Edge \u3068 CloudFront Functions \u306e\u9055\u3044\u3092\u7406\u89e3\u3057\u3001\u9069\u5207\u306a\u30c4\u30fc\u30eb\u3092\u9078\u629e\u3059\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3059\u3002<\/b> AWS \u306e\u30a8\u30c3\u30b8\u30b3\u30f3\u30d4\u30e5\u30fc\u30c6\u30a3\u30f3\u30b0\u3092\u6d3b\u7528\u3057\u3001\u3088\u308a\u67d4\u8edf\u306a\u30b3\u30f3\u30c6\u30f3\u30c4\u914d\u4fe1\u3092\u5b9f\u73fe\u3057\u3066\u307f\u3066\u304f\u3060\u3055\u3044\uff01<\/span><\/p>\n\n\n\n
\u3010\u53c2\u8003\u60c5\u5831\u3011\u516c\u5f0f\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u30fb\u8a18\u4e8b<\/b><\/h3>\n\n\n\n