-
Notifications
You must be signed in to change notification settings - Fork 2
/
frontend.tf
101 lines (83 loc) · 2.38 KB
/
frontend.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
locals {
s3_origin_id = "s3-photopremium"
}
// s3 bucket for code (static files)
data "aws_iam_policy_document" "photopremium-document-s3_policy" {
statement {
actions = ["s3:GetObject"]
principals {
identifiers = [aws_cloudfront_origin_access_identity.photopremium-access-identity.iam_arn]
type = "AWS"
}
resources = ["${aws_s3_bucket.photopremium-dev-static-files.arn}/*"]
}
}
resource "aws_s3_bucket_policy" "photopremium-s3_policy" {
bucket = aws_s3_bucket.photopremium-dev-static-files.id
policy = data.aws_iam_policy_document.photopremium-document-s3_policy.json
}
resource "aws_s3_bucket" "photopremium-dev-static-files" {
bucket = var.cloudfront_dns
acl = var.s3_bucket_acl
website {
error_document = "index.html"
index_document = "index.html"
}
tags = {
Name = var.cloudfront_dns
}
}
// cloud front distribution
resource "aws_cloudfront_origin_access_identity" "photopremium-access-identity" {
}
resource "aws_cloudfront_distribution" "photopremium-cdn" {
origin {
domain_name = aws_s3_bucket.photopremium-dev-static-files.bucket_regional_domain_name
origin_id = local.s3_origin_id
s3_origin_config {
origin_access_identity = aws_cloudfront_origin_access_identity.photopremium-access-identity.cloudfront_access_identity_path
}
}
enabled = true
is_ipv6_enabled = true
default_root_object = "index.html"
aliases = [var.cloudfront_dns]
default_cache_behavior {
allowed_methods = ["GET", "HEAD"]
cached_methods = ["GET", "HEAD"]
target_origin_id = local.s3_origin_id
viewer_protocol_policy = "redirect-to-https"
min_ttl = 0
default_ttl = 60
max_ttl = 60
forwarded_values {
query_string = false
cookies {
forward = "none"
}
}
}
restrictions {
geo_restriction {
restriction_type = "none"
}
}
viewer_certificate {
acm_certificate_arn = var.certificate_arn_front
cloudfront_default_certificate = false
ssl_support_method = "sni-only"
minimum_protocol_version = "TLSv1.2_2018"
}
custom_error_response {
error_caching_min_ttl = 10
error_code = 403
response_code = 200
response_page_path = "/index.html"
}
custom_error_response {
error_caching_min_ttl = 10
error_code = 404
response_code = 200
response_page_path = "/index.html"
}
}