Usage

Creates an AWS S3 Bucket used to host files served by AWS CloudFront.

module "cloudfront_bucket" {
  source = "dod-iac/cloudfront-bucket/aws"

  aws_cloudfront_origin_access_identity_arn = aws_cloudfront_origin_access_identity.main.iam_arn
  name = format("app-%s-www-%s-%s", var.application, var.environment, var.region)
  logging_target_bucket = var.logs_bucket_name
  tags = {
    Application = var.application
    Environment = var.environment
    Automation  = "Terraform"
  }
}

Pass an aliased provider to the module as aws, to change the region the bucket is in.

module "cloudfront_bucket" {
  source = "dod-iac/cloudfront-bucket/aws"

  providers = {
    aws           = aws.us-east-1
  }

  aws_cloudfront_origin_access_identity_arn = aws_cloudfront_origin_access_identity.main.iam_arn
  name = format("app-%s-www-%s-%s", var.application, var.environment, "us-east-1")
  logging_target_bucket = var.logs_bucket_name
  tags = {
    Application = var.application
    Environment = var.environment
    Automation  = "Terraform"
  }
}

Terraform Version

Terraform 0.13. Pin module version to ~> 2.0.0 . Submit pull-requests to master branch.

Terraform 0.12. Pin module version to ~> 1.0.0 . Submit pull-requests to terraform012 branch.

Terraform 0.11 is not supported.

Upgrade Paths

Upgrading from 1.0.0 to 2.x.x

Version 2.x.x removes the region variable. Pass an aliased provider to the module as aws, to change the region the bucket is in.

License

This project constitutes a work of the United States Government and is not subject to domestic copyright protection under 17 USC § 105. However, because the project utilizes code licensed from contributors and other third parties, it therefore is licensed under the MIT License. See LICENSE file for more information.

Requirements

Name	Version
terraform	>= 0.13
aws	~> 3.0

Providers

Name	Version
aws	~> 3.0

Modules

No Modules.

Resources

Name
aws_iam_policy_document
aws_s3_bucket
aws_s3_bucket_policy
aws_s3_bucket_public_access_block

Inputs

Name	Description	Type	Default	Required
aws_cloudfront_origin_access_identity_arn	The ARN of the CloudFront Origin Access Identity (OAI) granted access to read from the bucket.	string	n/a	yes
logging_target_bucket	The name of the bucket that will receive the log objects.	string	n/a	yes
logging_target_prefix	To specify a key prefix for log objects. Defaults to "s3/[name]/".	string	null	no
name	The name of the AWS S3 Bucket used to host files served by AWS CloudFront.	string	n/a	yes
tags	Tags to apply to the AWS S3 Bucket.	map(string)	{}	no

Outputs

Name	Description
arn	The ARN of the AWS S3 Bucket used to host files served by AWS CloudFront.
bucket_regional_domain_name	The bucket regional domain name of the AWS S3 Bucket used to host files served by AWS CloudFront.