diff --git a/terraform/releases/impl/cache.tf b/terraform/releases/impl/cache.tf
new file mode 100644
index 000000000..60066f17f
--- /dev/null
+++ b/terraform/releases/impl/cache.tf
@@ -0,0 +1,11 @@
+resource "aws_cloudfront_response_headers_policy" "cache-immutable" {
+  name = "cache-immutable"
+
+  custom_headers_config {
+    items {
+      header   = "Cache-Control"
+      override = true
+      value    = "immutable, max-age=9999999"
+    }
+  }
+}
diff --git a/terraform/releases/impl/cloudfront-doc.tf b/terraform/releases/impl/cloudfront-doc.tf
index 660654f0b..29235df89 100644
--- a/terraform/releases/impl/cloudfront-doc.tf
+++ b/terraform/releases/impl/cloudfront-doc.tf
@@ -49,6 +49,29 @@ resource "aws_cloudfront_distribution" "doc" {
     }
   }
 
+  ordered_cache_behavior {
+    path_pattern     = "*.woff2"
+    cache_policy_id  = "cache-immutable"
+    allowed_methods  = ["GET", "HEAD", "OPTIONS"]
+    cached_methods   = ["GET", "HEAD", "OPTIONS"]
+    target_origin_id = "main"
+
+    forwarded_values {
+      headers      = []
+      query_string = false
+
+      cookies {
+        forward = "none"
+      }
+    }
+
+    min_ttl                = 0
+    default_ttl            = 86400
+    max_ttl                = 31536000
+    compress               = true
+    viewer_protocol_policy = "redirect-to-https"
+  }
+
   origin {
     origin_id   = "main"
     domain_name = aws_s3_bucket.static.website_endpoint