/
main.tf
100 lines (83 loc) · 2.22 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
######
# S3
######
resource "aws_s3_bucket" "static_site" {
bucket = "${var.bucket_name}"
acl = "private"
}
resource "aws_s3_bucket_policy" "static_site" {
bucket = "${aws_s3_bucket.static_site.id}"
policy = "${data.aws_iam_policy_document.static_site_policy.json}"
}
data "aws_iam_policy_document" "static_site_policy" {
statement {
actions = ["s3:GetObject"]
resources = ["${aws_s3_bucket.static_site.arn}/*"]
principals {
type = "AWS"
identifiers = ["${aws_cloudfront_origin_access_identity.static_site.iam_arn}"]
}
}
}
######
# CloudFront
######
locals {
s3_origin_id = "s3-origin-${var.domain}"
}
resource "aws_cloudfront_origin_access_identity" "static_site" {
comment = "${var.domain}"
}
resource "aws_cloudfront_distribution" "static_site" {
aliases = ["${var.domain}"]
origin {
domain_name = "${aws_s3_bucket.static_site.bucket_regional_domain_name}"
origin_id = "${local.s3_origin_id}"
s3_origin_config {
origin_access_identity = "${aws_cloudfront_origin_access_identity.static_site.cloudfront_access_identity_path}"
}
}
enabled = true
is_ipv6_enabled = true
comment = "${var.domain}"
default_root_object = "index.html"
default_cache_behavior {
allowed_methods = ["GET", "HEAD"]
cached_methods = ["GET", "HEAD"]
target_origin_id = "${local.s3_origin_id}"
forwarded_values {
query_string = false
cookies {
forward = "none"
}
}
viewer_protocol_policy = "redirect-to-https"
min_ttl = 0
default_ttl = 3600
max_ttl = 86400
}
restrictions {
geo_restriction {
restriction_type = "none"
}
}
price_class = "PriceClass_200"
viewer_certificate {
acm_certificate_arn = "${var.acm_certificate_arn}"
ssl_support_method = "sni-only"
minimum_protocol_version = "TLSv1"
}
}
######
# Route53
######
resource "aws_route53_record" "site" {
zone_id = "${var.zone_id}"
name = "${var.domain}"
type = "A"
alias {
name = "${aws_cloudfront_distribution.static_site.domain_name}"
zone_id = "${aws_cloudfront_distribution.static_site.hosted_zone_id}"
evaluate_target_health = false
}
}