通过CloudFront访问S3时，是否需同时支付CloudFront与S3请求费用？

Great question—this is a super common point of confusion when setting up CloudFront to serve S3 content! Let me break it down clearly for you:

Yes, you will be charged for both sets of requests in your example. Here’s the breakdown:

• When a user sends a request to CloudFront for content that’s not cached, CloudFront has to send its own request to your S3 bucket to fetch that content.
• So for 1 million uncached requests to CloudFront, you’ll get billed for two separate charges:
  • 1 million CloudFront requests (the user-facing ones)
  • 1 million S3 GET requests (the ones CloudFront initiates to your origin bucket)

A quick clarification: This applies even if you’re using Origin Access Control (OAC) or Origin Access Identity (OAI) to secure your S3 bucket. Those tools only block direct public access to S3—they don’t waive the S3 request fees for CloudFront’s origin fetches.

The good news? Once content is cached in CloudFront, subsequent requests for it won’t hit S3 at all. For those cached hits, you’ll only pay CloudFront’s request and bandwidth fees—this is one of the core cost-saving benefits of using a CDN!

内容的提问来源于stack exchange，提问作者eadam