CloudFront Functions

CloudFront Functions is serverless scripting platform that allows you to run lightweight JavaScript code at CloudFront Edge locations. 

Invocation pricing is $0.10 per 1 million invocations ($0.0000001 per invocation). 

You are charged for the total number of invocations across all your functions. CloudFront Functions counts an invocation each time it starts executing in response to a CloudFront event globally.

CloudFront KeyValueStore

CloudFront KeyValueStore is a global, low-latency key value data store that allows you to run lightweight compute with access to stateful data at CloudFront edge locations for improved latency, performance, and developer experience.

The cost for reads within CloudFront Functions is $0.03 per 1 million reads (equivalent to $0.00000003 per read). Charges apply based on the overall number of reads across all your functions. CloudFront KeyValueStore counts the number of reads from within your function code each time there is a CloudFront Functions invocation.

For any API actions not involving reads within CloudFront Functions, the cost is $1 per 1,000 API requests.

Lambda@Edge

Lambda@Edge is a fully programmable, serverless edge computing environment for implementing a wide variety of complex customizations. Lambda@Edge functions are executed in a regional edge cache (usually in the AWS region closest to the CloudFront edge location reached by the client).

You are charged for the total number of requests across all your functions. Lambda@Edge counts a request each time it starts executing in response to an Amazon CloudFront event globally.

Request pricing is $0.60 per 1 million requests ($0.0000006 per request).

Duration is calculated from the time your code begins executing until it returns or otherwise terminates. You are charged $0.00005001 for every GB-second used. For instance, if you allocate 128MB of memory available per execution with your Lambda@Edge function, then your duration charge will be $0.00000625125 for every 128MB-second used, metered in 1ms granularity.

For instance, if you allocate 128 MB of memory available per invocation with your Lambda@Edge function, then your duration charge will be $0.00000625125 for every 128 MB/second used. Note that Lambda@Edge functions are metered at a granularity of 1ms. There is no free tier for Lambda@Edge at this time.

Origin Shield requests

If you set up Origin Shield as a centralized caching layer, request fees are charged based on the AWS Region you have configured to be your Origin Shield Region and not based on the Amazon CloudFront edge location serving content. Origin Shield is charged as a request fee for each request that comes from another regional cache to your Origin Shield; see Estimating Origin Shield costs in the Amazon CloudFront Developer Guide.

If you are interested in using Origin Shield in a multi-CDN architecture and have discounted pricing, additional charges may apply. Contact us or your AWS sales representative for more information.

Origin Shield Request Pricing for All HTTP Methods (per 10,000)

Invalidation requests

No additional charge for the first 1,000 paths requested for invalidation each month. Thereafter, $0.005 per path requested for invalidation. 

Note: A path listed in your invalidation request represents the URL (or multiple URLs if the path contains a wildcard character) of the object(s) you want to invalidate from CloudFront cache. For more information about invalidation, see Invalidating Objects in the Amazon CloudFront Developer Guide.

Real-time log requests
Real-time logs are charged based on the number of log lines that are generated. You pay $0.01 for every 1,000,000 log lines that CloudFront publishes to your log destination.

Field Level Encryption requests
Field-level encryption is charged based on the number of requests that need the additional encryption. You pay $0.02 for every 10,000 requests that CloudFront encrypts using field-level encryption in addition to the standard HTTPS request fee.

Dedicated IP custom SSL
You pay $600 per month for each custom SSL certificate associated with one or more CloudFront distributions using the Dedicated IP version of custom SSL certificate support. This monthly fee is pro-rated by the hour. For example, if you had your custom SSL certificate associated with at least one CloudFront distribution for just 24 hours (i.e. one day) in the month of June, your total charge for using the custom SSL certificate feature in June will be (one day / 30 days) * $600 = $20. For other SSL options, please visit the CloudFront Custom SSL detail page.

WebSocket pricing
Amazon CloudFront supports using WebSocket, a TCP-based protocol that is useful when you need long-lived bidirectional connections between clients and servers. There is no additional charge for sending data over the WebSocket protocol. Standard charges for using Amazon CloudFront apply.

Origin server to Amazon CloudFront (origin fetches)
Amazon CloudFront requires you to store the original, definitive version of your content in an origin server. With Amazon CloudFront, you can use an AWS service (e.g., Amazon S3, Amazon EC2, Elastic Load Balancing) or your own server as the origin server. You are responsible for the separate fees you accrue for your origin server.

If you are using an AWS service as the origin for your content, data transferred from origin to edge locations (Amazon CloudFront origin fetches) are free of charge. This applies to data transfer from all AWS regions to all global CloudFront edge locations. Data transfer out from AWS services for all non-origin fetch traffic (such as multi-CDN traffic) to CloudFront will incur their respective regional data transfer out charges. Pricing for all AWS services is available here.

Amazon CloudFront to origin server
Data transfer out of Amazon CloudFront to your origin server, such as POST and PUT requests or WebSocket traffic flowing from the client to WebSocket server, will be billed at the regional data transfer out to origin rates listed in the Regional Data Transfer Out to Origin (per GB) table above.