(aws_cloudfront): Distribution does not associate set certificate

[JZechy]

Describe the bug

I was creating CloudFront Distribution with custom alternate domain with usage of a cross region certificate from us-east-1 to eu-central-1 as described in CDK docs here.

Certificate association with CloudFront distribution template is missing (only Aliases are assigned), leading to an error during stack update.

Regression Issue

• Select this option if this issue appears to be a regression.

Last Known Working CDK Version

No response

Expected Behavior

According to CloudFormation documentation property called ViewerCertificate under DistributionConfig should be created.

Current Behavior

ViewerCertificate property is missing in DistributionConfig for existing and even new cloudfront distributions. Distribution is only created with Aliases property leading to an error during stack update, because distribution is missing reference to domain certificate.

Reproduction Steps

Create a CloudFront distribution as described in Docs here.

Possible Solution

No response

Additional Information/Context

No response

CDK CLI Version

2.174.0

Framework Version

No response

Node.js Version

22.9.0

OS

Windows 10

Language

.NET

Language Version

No response

Other information

No response

[khushail]

Hi @JZechy , thanks for reaching out.
Could you please share a minimal self contained reproduction code which I can use on my side to reproduce the issue?

Also would like to add highlight one more thing - the cross-region certificates in cloudfront is Experimental -https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_cloudfront-readme.html#cross-region-certificates

[github-actions]

This issue has not received a response in a while. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.

[JZechy]

@khushail Identified problem on my side - I forgot when I init property alongside object creation with new keyword, the properties are not available for constructor. So this code...

CertificateStack cert = new(scope);
DistributionStack dist = new(scope) {
  DomainCertificate = cert.Instance
}

Cannot work if I describe the distribution in constructor - where the DomainCertificate is not available yet.

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.