feat(static-website): add option to disable web acl (#454)

Like TypeSafeRestApi, we use a web ACL by default but allow the user to disable it
aws · Jun 2, 2023 · e44926d · e44926d
1 parent b71a28f
commit e44926d
Show file tree

Hide file tree

Showing 4 changed files with 1,896 additions and 2 deletions.
diff --git a/packages/static-website/src/cloudfront-web-acl.ts b/packages/static-website/src/cloudfront-web-acl.ts
@@ -75,6 +75,12 @@ export interface CloudFrontWebAclProps {
    * @default - undefined
    */
   readonly cidrAllowList?: CidrAllowList;
+
+  /**
+   * Set to true to prevent creation of a web acl for the static website
+   * @default false
+   */
+  readonly disable?: boolean;
 }
 
 /**

diff --git a/packages/static-website/src/static-website.ts b/packages/static-website/src/static-website.ts
@@ -165,8 +165,9 @@ export class StaticWebsite extends Construct {
     // Web ACL
     const { distributionProps } = props;
     const webAclArn =
-      distributionProps?.webAclId ??
-      new CloudfrontWebAcl(this, "WebsiteAcl", props.webAclProps).webAclArn;
+      distributionProps?.webAclId ?? props.webAclProps?.disable
+        ? undefined
+        : new CloudfrontWebAcl(this, "WebsiteAcl", props.webAclProps).webAclArn;
 
     // Cloudfront Distribution
     const logBucket =