Hacker News new | ask | show | jobs
by eistrati 3499 days ago
> While I'm not going to complain about a price reduction, I'd honestly be more excited if S3 implemented support for additional headers and redirect rules. Right now, anyone hosting a single page app (e.g. Angular/React) behind S3 and Cloudfront is going to get an F on securityheaders.io.

You can setup "Origin Custom Headers" in CloudFront ;)
1 comments
Alex3917 3499 days ago
That's for sending headers to your web server or S3 though, not for sending headers to the user. There are a few extra headers you can send to the user, but not the security related ones.
link