LambdaオリジンのCloudFrontにおけるLambda@EdgeとOriginShieldの効果を試してみた

    Type: AWS::Route53::HealthCheck
    Properties:
      HealthCheckConfig:
        FullyQualifiedDomainName: !Sub ${CloudFrontDistribution.DomainName}
        Port: 443
        Type: HTTPS
        ResourcePath: /url/
        RequestInterval: 30
        FailureThreshold: 3
        EnableSNI: true
        Regions:
          - us-east-1 
          - ap-northeast-1 
          - ap-southeast-1

exports.handler = async (event) => {
  await new Promise(resolve => setTimeout(resolve, 100));
  return {
    statusCode: 200,
    headers: {
      'Content-Type': 'application/json',
      'Cache-Control': 'no-store'
    },
    body: JSON.stringify(event, null, 2)
  };
};

        Origins:
          - Id: LambdaUrl
            DomainName: !Select [2, !Split ['/', !GetAtt UrlFunctionUrl.FunctionUrl]]
            CustomOriginConfig:
              HTTPSPort: 443
              OriginProtocolPolicy: https-only
            OriginShield:
                Enabled: true
                OriginShieldRegion: us-east-1             

        CacheBehaviors:
          - PathPattern: /url/*
            TargetOriginId: LambdaUrl
            ViewerProtocolPolicy: https-only
            ForwardedValues:
              QueryString: true
              Cookies:
                Forward: none
              Headers: []
            MinTTL: 0
            DefaultTTL: 0
            MaxTTL: 0
            AllowedMethods:
              - GET
              - HEAD
          - PathPattern: /edge/*
            TargetOriginId: S3website
            ViewerProtocolPolicy: allow-all
            LambdaFunctionAssociations:
              - EventType: origin-request
                LambdaFunctionARN: !Ref EdgeFunctionVersion
            AllowedMethods:
              - GET
              - HEAD
            ForwardedValues:
              QueryString: true
              Cookies:
                Forward: none
              Headers: []
            MinTTL: 0
            DefaultTTL: 0
            MaxTTL: 0

fields @timestamp, @message
| parse @message /\"cs-uri-stem\":\"(?<uri>[^\"]+)\"/ 
| parse @message /\"c-country\":\"(?<country>[^\"]+)\"/ 
| parse @message /\"time-taken\":\"(?<timetaken>[^\"]+)\"/ 
| parse @message /\"x-edge-location\":\"(?<location>[^\"]+)\"/ 
| parse @message /\"x-edge-result-type\":\"(?<result_type>[^\"]+)\"/ 
| parse @message /\"cs\(User-Agent\)\":\"(?<useragent>[^\"]+)\"/ 
| parse @message /\"sc-status\":\"(?<status>[^\"]+)\"/ 
| filter useragent like 'Amazon-Route53-Health-Check-Service%'
| filter country in ["US", "JP", "SG"] 
| stats count() as request_count, 
        sum(timetaken) as total_time, 
        avg(timetaken) as avg_time ,
        percentile(timetaken, 10) as p10_time ,
        percentile(timetaken, 50) as p50_time ,
        percentile(timetaken, 95) as p95_time 
  by country,location,result_type, uri, status
| sort p50_time