# Custom headers when serving docs through Amplify Hosting # # See: https://docs.aws.amazon.com/amplify/latest/userguide/custom-headers.html#setting-custom-headers customHeaders: - pattern: "**/*" headers: - key: "Strict-Transport-Security" value: "max-age=31536000; includeSubDomains" - key: "X-Frame-Options" value: "SAMEORIGIN" - key: "X-Content-Type-Options" value: "nosniff" # CSP set in _document.tsx meta tag