diff --git a/apps/bedrock/pulumi/aws/cloudfront.ts b/apps/bedrock/pulumi/aws/cloudfront.ts
index 816f8708b9..6a7ab649de 100644
--- a/apps/bedrock/pulumi/aws/cloudfront.ts
+++ b/apps/bedrock/pulumi/aws/cloudfront.ts
@@ -137,14 +137,14 @@ const glyphPub = new aws.cloudfront.Distribution('glyph.pub', {
       originId: 'penxle-data',
       domainName: 'penxle-data.s3.amazonaws.com',
       originAccessControlId: originAccessControl.id,
-      originShield: { enabled: true, originShieldRegion: 'ap-northeast-2' },
+      originShield: { enabled: false, originShieldRegion: 'ap-northeast-2' },
     },
     {
       originId: 'penxle-images',
       // spell-checker:disable-next-line
       domainName: 'penxle-images-zjf3dm5q7dybsggznshhnpyqapn2a--ol-s3.s3.ap-northeast-2.amazonaws.com',
       originAccessControlId: originAccessControl.id,
-      originShield: { enabled: true, originShieldRegion: 'ap-northeast-2' },
+      originShield: { enabled: false, originShieldRegion: 'ap-northeast-2' },
     },
   ],
 
diff --git a/packages/pulumi/src/components/site.ts b/packages/pulumi/src/components/site.ts
index 49b08e870e..83c366a4db 100644
--- a/packages/pulumi/src/components/site.ts
+++ b/packages/pulumi/src/components/site.ts
@@ -309,10 +309,7 @@ export class Site extends pulumi.ComponentResource {
                 originReadTimeout: 60,
                 originKeepaliveTimeout: 60,
               },
-              originShield: {
-                enabled: true,
-                originShieldRegion: 'ap-northeast-2',
-              },
+              originShield: { enabled: false, originShieldRegion: 'ap-northeast-2' },
             },
           ],