Title: cdn origin pull
Last modified: August 22, 2016

---

# cdn origin pull

 *  [samdar2](https://wordpress.org/support/users/samdar2/)
 * (@samdar2)
 * [11 years, 3 months ago](https://wordpress.org/support/topic/cdn-origin-pull/)
 * Hi,
 * For the W3TC CDN configuration with Amazon and Origin Pull why does W3TC need
   to know the Access Key ID and the Secret Key?
 * With Origin Pull, the Cloudfront CDN is pulling the files from WordPress, and
   WordPress is not pushing files to the CDN, and so why would WordPress need the
   credentials to modify or access the CDN directly?
 * By the Principle of Least Privilege, it would be safer to not provide this access,
   but I might be missing something quite important regarding the reason it must
   have access.
 * Thoughts?
 * Thank you,
    Sam
 * [https://wordpress.org/plugins/w3-total-cache/](https://wordpress.org/plugins/w3-total-cache/)

The topic ‘cdn origin pull’ is closed to new replies.

 * ![](https://ps.w.org/w3-total-cache/assets/icon-256x256.png?rev=1041806)
 * [W3 Total Cache](https://wordpress.org/plugins/w3-total-cache/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/w3-total-cache/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/w3-total-cache/)
 * [Active Topics](https://wordpress.org/support/plugin/w3-total-cache/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/w3-total-cache/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/w3-total-cache/reviews/)

 * 0 replies
 * 1 participant
 * Last reply from: [samdar2](https://wordpress.org/support/users/samdar2/)
 * Last activity: [11 years, 3 months ago](https://wordpress.org/support/topic/cdn-origin-pull/)
 * Status: not resolved