[WIP] Serverless Protected Static Website

[s0enke]

Static website hosting is still a thing. And often, we want to protect our content e.g. with a password, for example when a website should not yet be public. While S3 provides a way to host static websites, it unfortunately offers no possibility to protect these websites with e.g. HTTP Basic Auth.
This CloudFormation Terraform template utilizes CloudFront with Origin Access Identity and Lambda@Edge to mimic a static website with basic auth password protection. Cognito userpools are used to manage credentials.

TODO:

• Lambda@Edge at Origin has to generate the Cookie for OAI after checking credentials against Cognito
• Something has to generate a form or http basic auth headers in CFN
• Connection between CloudFront and Lambda (Custom Resource?)
• OAI as Custom Resource or Terraform
• CloudFront Lambda with TerraForm
• Are signed urls needed? With network access at the lambda@edge we might not need this
• Description
• Cognito Userpool
• S3 Bucket
• Route53 optional
• Custom SSL Cert
• Subdomain to path mapping optionl
• Caching optional

Lessons Learned:

• Does not execute with origin response >= 400, e.g. could reveal structure
• terraform python module https://pypi.python.org/pypi/python-terraform/0.8.6

[s0enke]

superseeded by #14