Free Tier
Recurring AWS free-tier allowance specific to CloudFront Functions.
- CloudFront Functions invocations: 2,000,000 invocations per month
Amazon CloudFront Functions Pricing, Features & Alternatives
Lightweight JavaScript for viewer request and response logic at globally distributed edge locations.
Amazon CloudFront Functions runs lightweight JavaScript at the CDN edge for viewer-request and viewer-response processing. It can rewrite URLs, normalize cache keys, inspect request attributes, and modify headers without deploying an origin application. The restricted runtime is designed for short request-path operations, not general-purpose backend functions or network-dependent work.
Best for
High-volume, latency-sensitive request and response transformations that must execute directly at the CDN edge.
Watch out for
The restricted JavaScript runtime has no network, file-system, environment-variable, dynamic-code, or timer access.
- Workloads
- Edge Request Processing
- Services
- CDN
- Edge Functions
- Key-Value Store
- Delivery
- Managed
Development & Execution
Supported platform capabilities, execution environments, development technologies, deployment models, integrations, and triggers.
Runtimes
- V8 Isolates
Languages
- JavaScript
Capabilities
- Compute Autoscaling
Deployment & packaging
- Serverless (Managed Runtime)
Integrations
- Terraform
Triggers
- Edge Events
- HTTP Requests
Pricing
Published pricing structure, representative costs, and material billing factors.
- Starting Price
- $0.10
- Primary Billing
- Resource based
- Free Tier
- Recurring free allowances
- Commitment
- CloudFront Functions and KeyValueStore are billed by usage after applicable recurring allowances.
Amazon CloudFront Functions Usage
Primary PricingStandalone CloudFront Functions and direct CloudFront KeyValueStore usage; broader CloudFront CDN pricing is excluded.
| Resource | Billing Unit | Price |
|---|---|---|
| CloudFront Functions invocations | per 1 million invocations | $0.10 |
| CloudFront KeyValueStore reads | per 1 million reads | $0.03 |
| CloudFront KeyValueStore API operations | per 1,000 API operations | $1 |
Billing Commitment
CloudFront Functions and KeyValueStore are billed by usage after applicable recurring allowances.
Infrastructure & Availability
Where workloads run, how deployment is scoped, and what underlying infrastructure the platform depends on.
Amazon CloudFront uses a global edge network with 750+ standard points of presence in 100+ cities across 50+ countries, plus 1,140+ embedded points of presence across 300+ cities in North America, Europe, and Asia. AWS also operates 15 Regional Edge Caches.
Execution
- Edge
Deployment scope
- Global
Infrastructure providers
- Amazon Web Services
Availability footprint
- PoPs
- 750+
Availability reviewed · Availability source
Resource & Execution Limits
Execution time
Submillisecond
Per invocation
Memory
2 MB
Per function
Function size
10 KB
Per function
Security & Compliance
Security Controls
- Access Control
- AWS IAM for function management
- Encryption
- Function code, configuration, and key-value data at rest and in transit CloudFront Functions and KVS
- Network Isolation
- Dedicated process and CPU; data cleared between executions Per edge location
- Audit Logging
- CloudTrail management events and CloudWatch function logs Edge request logs are best effort
Audits & Certifications
- SOC Reports
- SOC 1, SOC 2, SOC 3 Amazon CloudFront service scope
- ISO Certifications
- ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, ISO/IEC 27701:2019, ISO 22301:2019, ISO/IEC 20000-1:2018, ISO 9001:2015 Amazon CloudFront service scope; excludes embedded POP content delivery
- CSA STAR
- Amazon CloudFront service scope
- PCI DSS
- Amazon CloudFront service scope
Compliance
- HIPAA
- HIPAA-eligible service AWS BAA and customer controls required
FAQ
What is the difference between CloudFront Functions and Lambda@Edge?
CloudFront Functions is designed for lightweight JavaScript at viewer request and response events. Lambda@Edge supports Node.js and Python, can run on origin request and response events, and provides more runtime resources and network access for more complex logic.
Is Amazon CloudFront Functions free?
Yes, within the recurring AWS free allowance. CloudFront Functions includes 2 million invocations per month before usage charges apply.
How long can a CloudFront Function run?
CloudFront Functions are designed for submillisecond execution at viewer request and viewer response events. For logic that needs longer execution time or origin events, Lambda@Edge provides a larger runtime envelope.
