[Static website] - load SPA via another path (not root) failed (error 403)

[piolet]

Description

Hi all,

I deployed an SPA application (vue JS) via the construct Static Website. It works correctly except one detail.

If i share the url for my SPA to another user, for example : https://app.example.com, it's ok.
But, if i share antoher url, not the root, for example : https://app.example.com/parameters
i have an access denied error :

How to Reproduce

to reproduce, the default construct like this :

constructs:
    app:
        type: static-website
        path: _dist
        domain:
            - app.${self:custom.domain}
            - demo.${self:custom.domain}
        # ARN of an ACM certificate for the domain, registered in us-east-1
        certificate: ${cf(us-east-1):certificate-${opt:stage, 'dev'}.StarCertificate}
        redirectToMainDomain: false

Additional Information

this error could be avoid with 3 adjustments in the construct

1. update S3 assets bucket to allow host site
2. update cloudfront origin. Not S3 origin, but CustomOrigin (HttpOrigin) to S3 static's url
3. manage 403 error like 404 error

With this 3 updates, we could load directly another url (not root url)

[t-richard]

I think it's a duplicate of #163

The issue is related to a recent update in the CDK that changed some permissions

[piolet]

Ah, maybe.

I don’t know the CDK background ;)

[moein-tropee]

@piolet it's indeed exactly the same issue.

[piolet]

@moein-tropee same issue 2 options to fix it ;)