ERROR aws network_error ai_generated true

502 ERROR The request could not be satisfied. CloudFront wasn't able to connect to the origin

ID: aws/aws-cloudfront-origin-error

Also available as: JSON · Markdown
85%Fix Rate
87%Confidence
95Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
2 active — — —

Root Cause

CloudFront cannot reach the configured origin server due to DNS, security group, or SSL/TLS issues.

generic

Workarounds

  1. 85% success Verify origin domain name resolves and origin server is accessible 
    Check DNS resolution, verify security groups allow CloudFront IPs, ensure origin is healthy

    Sources: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/troubleshooting-distributions.html

  2. 80% success Match SSL/TLS protocol between CloudFront and origin 
    Set Origin Protocol Policy to HTTPS Only and ensure origin supports TLSv1.2

    Sources: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-cloudfront-to-custom-origin.html

Dead Ends

Common approaches that don't work:

  1. Invalidate CloudFront cache to fix origin errors 90% fail

    Cache invalidation does not fix connectivity issues between CloudFront and the origin

  2. Change CloudFront price class to fix the issue 95% fail

    Price class only affects which edge locations are used, not origin connectivity

Error Chain

Leads to:
Frequently confused with: