---
title: "Creating a Read-Only CloudFront Role in AWS"
description: "You can add your CloudFront CDN in **Read-Only** mode to **Flumotion Smart Multi CDN** and use it for importing your configuration, monitoring, and traffic steering. To add CloudFront as one of your CDN providers, you need an AWS role that…"
url: "https://www.flumotion.com/docs/multiCDN/creating-a-read-only-cloudfront-role-in-aws/"
updated: "2026-08-27"
category: Guides / CDN Providers
---

# Creating a Read-Only CloudFront Role in AWS

You can add your CloudFront CDN in **Read-Only** mode to **Flumotion Smart Multi CDN** and use it for importing your configuration, monitoring, and traffic steering. To add CloudFront as one of your CDN providers, you need an AWS role that can be used with Flumotion Smart Multi CDN.

As part of creating the role, you need to generate a UUID to be used as an External ID. You can easily create this role using one of the following methods:

- **Using CloudFormation** – Use this [quick-create link](https://us-east-1.console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/quickcreate?stackName=ioriver-iam-ro-role-stack&templateURL=https://providers-ioriver.s3.eu-central-1.amazonaws.com/ior_iam_role_read_only_cloudformation.yaml?region=us-east-1&prefix=ior_cloudfront_read_only_role.yaml&param_ExternalID=) to create the Read-Only role.
- **Using Terraform** – Use this [code](https://providers-ioriver.s3.eu-central-1.amazonaws.com/ior_iam_role_read_only.tf) to create the Read-Only role.

Once you have created the role, you should obtain the following information:

1. **RoleArn** – The ID of the created role.
2. **External-Id** – The UUID you generated and used when creating the role.

Save the created **RoleArn** and **External-Id**, and provide them to the **Flumotion Smart Multi CDN support team** to add your CloudFront CDN in **Read-Only** mode.