---
title: "1.35.3 — CDN enable completes on a live account; REST never writes the secrets column"
description: "Enabling CDN delivery on a real AWS account now finishes: the CDN record's id columns fit CloudFront's 36-character key group ids. A REST body can no longer write a model's encrypted secrets column on any model."
date: "2026-10-15"
tags: ["release"]
canonical: "https://django-mojo.sitesmojo.com/changelog/1-35-3/"
---

Enabling CDN delivery on a real AWS account now finishes: the CDN record's id columns fit CloudFront's 36-character key group ids. A REST body can no longer write a model's encrypted secrets column on any model.

### Fixed
- Enabling CDN delivery created every AWS resource and then failed to save the `CdnDistribution` row, because a CloudFront key group id is a 36-character UUID and the column held 32. `distribution_id`, `oac_id` and `key_group_id` are now 64 characters. A re-run after upgrading adopts what the failed run created.
- `mojo_secrets`, the encrypted secrets column of every `MojoSecrets` model, is never taken from a REST body, on any model, alongside `id`, `pk`, `created` and `uuid`.

### Upgrade notes
- Migration `fileman.0018` widens three columns on `fileman_cdndistribution`. No data changes.