B2C eCDN Skill
Use the b2c CLI plugin to manage eCDN (embedded Content Delivery Network) zones, certificates, security settings, and more.
Tip: If
b2cis not installed globally, usenpx @salesforce/b2c-cliinstead (e.g.,npx @salesforce/b2c-cli ecdn zones list).
Prerequisites
- OAuth credentials with
sfcc.cdn-zonesscope (read operations) - OAuth credentials with
sfcc.cdn-zones.rwscope (write operations) - Tenant ID for your B2C Commerce organization
Examples
List CDN Zones
# list all CDN zones for a tenant
b2c ecdn zones list --tenant-id zzxy_prd
# list with JSON output
b2c ecdn zones list --tenant-id zzxy_prd --json
Create a Storefront Zone
# create a new storefront zone
b2c ecdn zones create --tenant-id zzxy_prd --storefront-hostname www.example.com --origin-hostname origin.example.com
Purge Cache
# purge cache for specific paths
b2c ecdn cache purge --tenant-id zzxy_prd --zone my-zone --path /products --path /categories
# purge by cache tags
b2c ecdn cache purge --tenant-id zzxy_prd --zone my-zone --tag product-123 --tag category-456
# purge everything
b2c ecdn cache purge --tenant-id zzxy_prd --zone my-zone --purge-everything
Manage Certificates
# list certificates for a zone
b2c ecdn certificates list --tenant-id zzxy_prd --zone my-zone
# add a new certificate
b2c ecdn certificates add --tenant-id zzxy_prd --zone my-zone --hostname www.example.com --certificate-file ./cert.pem --private-key-file ./key.pem
# get certificate details
b2c ecdn certificates get --tenant-id zzxy_prd --zone my-zone --certificate-id abc123
# validate a custom hostname
b2c ecdn certificates validate --tenant-id zzxy_prd --zone my-zone --certificate-id abc123
Security Settings
# get security settings
b2c ecdn security get --tenant-id zzxy_prd --zone my-zone
# update security settings
b2c ecdn security update --tenant-id zzxy_prd --zone my-zone --ssl-mode full --min-tls-version 1.2 --always-use-https
Speed Settings
# get speed optimization settings
b2c ecdn speed get --tenant-id zzxy_prd --zone my-zone
# update speed settings
b2c ecdn speed update --tenant-id zzxy_prd --zone my-zone --browser-cache-ttl 14400 --auto-minify-html --auto-minify-css
Additional Topics
For less commonly used eCDN features, see the reference files:
- SECURITY.md — WAF (v1 and v2), custom firewall rules, rate limiting, and Page Shield (CSP policies, script detection, notification webhooks)
- ADVANCED.md — Logpush jobs, MRT routing rules, mTLS certificates, cipher suite configuration, and origin header modification
Configuration
The tenant ID can be set via environment variable:
SFCC_TENANT_ID: B2C Commerce tenant ID
The --zone flag accepts either:
- Zone ID (32-character hex string)
- Zone name (human-readable, case-insensitive lookup)
OAuth Scopes
| Operation | Required Scope |
|-----------|---------------|
| Read operations | sfcc.cdn-zones |
| Write operations | sfcc.cdn-zones.rw |
More Commands
See b2c ecdn --help for a full list of available commands and options in the ecdn topic.