---
title: Creating a CloudFront Role in AWS
description: "You can add your CloudFront CDN to **Flumotion Smart Multi CDN** and use it with your services. To do this, you need an AWS role that allows Flumotion Smart Multi CDN to manage your CloudFront distributions. The role should have…"
url: "https://www.flumotion.com/docs/multiCDN/creating-a-cloudfront-role-in-aws/"
updated: "2026-09-08"
category: Guides / CDN Providers
---

# Creating a CloudFront Role in AWS

You can add your CloudFront CDN to **Flumotion Smart Multi CDN** and use it with your services. To do this, you need an AWS role that allows Flumotion Smart Multi CDN to manage your CloudFront distributions.

The role should have the necessary permissions to manage your CloudFront distributions in your AWS account.

### Role Creation

As part of the role creation, you'll need to generate a UUID to use as an External ID. You can easily create the role using one of the following methods:

- **Using CloudFormation**: Use this [quick-create link](https://us-east-1.console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/quickcreate?stackName=ioriver-iam-role-stack&templateURL=https://providers-ioriver.s3.eu-central-1.amazonaws.com/ior_iam_role_cloudformation.yaml&param_ExternalID=) to create the role.
- **Using Terraform**: Use this [Terraform code](https://providers-ioriver.s3.eu-central-1.amazonaws.com/ior_iam_role.tf) to create the role.

Once you have created the role, obtain the following information:

1. **RoleArn** – The ARN (Amazon Resource Name) of the created role.
2. **External ID** – The UUID you generated and used when creating the role.

Add the RoleArn and External ID when configuring your CloudFront CDN [here](https://www.flumotion.com/docs/multiCDN/managing-cdn-accounts/).

Notes:

- The policy within the role grants **Flumotion Smart Multi CDN** access only to resources tagged with `ioriver`.
- If the role lacks the necessary permissions, adding CloudFront to your CDN providers will fail.

### Managing Existing Distributions

The created role restricts access to resources tagged with `ioriver`. Resources created through the **Flumotion Smart Multi CDN** platform are automatically tagged with the `ioriver` Owner tag.

To work with existing CloudFront distributions, you'll need to manually add the `ioriver` tag to them.

To add the `ioriver` tag to existing distributions:

1. Sign in to your AWS account and navigate to the CloudFront page.
2. Select the distribution you want **Flumotion Smart Multi CDN** to access.
3. Go to the **Tags** tab and click **Manage tags**.
4. Click **Add new tag**.
5. Under **Key**, enter `Owner`, and under **Value**, enter `ioriver`.Click **Save changes**.