Distribution: functionAssociations not rendered to Terraform JSON

[so0k]

Bug

The Distribution construct accepts functionAssociations in BehaviorOptions but does not render them to the Terraform JSON output. The property is silently ignored.

Expected behavior

CloudFront Function associations defined via:

defaultBehavior: {
  functionAssociations: [{
    function: myFunction,
    eventType: FunctionEventType.VIEWER_REQUEST,
  }],
}

should produce a function_association block in the synthesized aws_cloudfront_distribution resource.

Actual behavior

The function_association block is missing from the synthesized cdk.tf.json. The _renderDefaultCacheBehavior() method in distribution.js (lines 159-184) does not map functionAssociations to the provider output.

Workaround

(distribution as any).resource.addOverride("default_cache_behavior.function_association", [
  {
    event_type: "viewer-request",
    function_arn: directoryIndexFunction.functionArn,
  },
]);

Version

• terraconstructs 0.2.3
• @cdktf/provider-aws latest

[so0k]

Additional workaround note: create_before_destroy needed on CloudFront Function

When using the addOverride workaround and the CloudFrontFunction undergoes a name change (which forces replacement), Terraform's default destroy-then-create ordering fails with:

Error: deleting CloudFront Function: operation error CloudFront: DeleteFunction,
StatusCode: 409, FunctionInUse: Cannot delete function <name>, it is in use by 1 distributions

The fix is to also add create_before_destroy on the function resource so Terraform creates the new function first, updates the distribution to reference it, then deletes the old one:

(directoryIndexFunction as any).resource.addOverride("lifecycle", {
  create_before_destroy: true,
});