forked from vyjith/s3-static-website-cloudfront
-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.tf
127 lines (97 loc) · 3.43 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
# --------------------------------------------------
# S3 bucket creation
# --------------------------------------------------
resource "aws_s3_bucket" "mybucket" {
bucket = var.bucketname
tags = {
Name = var.project
}
}
# --------------------------------------------------
# Acl website permission
# --------------------------------------------------
resource "aws_s3_bucket_acl" "bucketacl" {
bucket = aws_s3_bucket.mybucket.id
acl = "private"
}
# --------------------------------------------------
# Acl website permission
# --------------------------------------------------
resource "aws_s3_bucket_policy" "allow_access_from_another_account" {
bucket = aws_s3_bucket.mybucket.id
policy = data.aws_iam_policy_document.s3_policy.json
}
# --------------------------------------------------
# Website uploading files
# --------------------------------------------------
resource "aws_s3_object" "object" {
for_each = fileset("myfiles/", "**")
bucket = aws_s3_bucket.mybucket.id
key = each.value
source = "myfiles/${each.value}"
etag = filemd5("myfiles/${each.value}")
content_type = lookup(tomap(var.mime_types), element(split(".", each.key), length(split(".", each.key)) - 1))
}
# --------------------------------------------------
# Adding-records
# --------------------------------------------------
resource "aws_route53_record" "cloudfront" {
zone_id = data.aws_route53_zone.selected.id
name = "${var.project}.${data.aws_route53_zone.selected.name}"
type = "A"
alias {
name = aws_cloudfront_distribution.website_cdnnew.domain_name
zone_id = "${aws_cloudfront_distribution.website_cdnnew.hosted_zone_id}"
evaluate_target_health = false
}
}
# --------------------------------------------------
# Creating could front distribution for s3 static website
# --------------------------------------------------
locals {
s3_origin_id = "s3.ap-south-1.amazonaws.com"
}
resource "aws_cloudfront_origin_access_identity" "bucketoai" {
comment = "Neww_access"
}
resource "aws_cloudfront_distribution" "website_cdnnew" {
origin {
domain_name = aws_s3_bucket.mybucket.bucket_regional_domain_name
origin_id = "${aws_s3_bucket.mybucket.id}-locals.s3_origin_id"
s3_origin_config {
origin_access_identity = aws_cloudfront_origin_access_identity.bucketoai.cloudfront_access_identity_path
}
}
aliases = ["${var.project}.${data.aws_route53_zone.selected.name}"]
enabled = true
is_ipv6_enabled = false
default_root_object = var.default_root
http_version = "http2"
price_class = var.price
default_cache_behavior {
allowed_methods = ["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"]
cached_methods = ["GET", "HEAD"]
target_origin_id = "${aws_s3_bucket.mybucket.id}-locals.s3_origin_id"
forwarded_values {
query_string = false
cookies {
forward = "none"
}
}
min_ttl = 0
default_ttl = 300
max_ttl = 1200
compress = true
viewer_protocol_policy = "redirect-to-https"
}
restrictions {
geo_restriction {
restriction_type = "none"
}
}
viewer_certificate {
acm_certificate_arn = var.acmarn
ssl_support_method = "sni-only"
minimum_protocol_version = "TLSv1"
}
}