Merge pull request #26 from rdok/patch-1

Fix restricting S3 assets access.

Author: Ben Smith

0.4-Building-A-Serverless-Laravel-App-With-AWS-SAM/template.yaml

@@ -99,7 +99,8 @@ Resources:
         # The assets (S3)
             -   Id: Assets
                 DomainName: !GetAtt Assets.RegionalDomainName
-                S3OriginConfig: {} # this key is required to tell CloudFront that this is an S3 origin, even though nothing is configured
+                S3OriginConfig:
+                  OriginAccessIdentity: !Sub "origin-access-identity/cloudfront/${S3OriginIdentityExample}"
         # The default behavior is to send everything to AWS Lambda
         DefaultCacheBehavior:
           AllowedMethods: [GET, HEAD, OPTIONS, PUT, POST, PATCH, DELETE]
@@ -140,4 +141,4 @@ Resources:
 Outputs:
    Domain:
      Description: 'CloudFront domain name'
-     Value: !GetAtt Cloudfrontdistribution.DomainName
+     Value: !GetAtt Cloudfrontdistribution.DomainName