You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|[archive_file.nonce_injector](https://registry.terraform.io/providers/hashicorp/archive/latest/docs/data-sources/file)| data source |
220
+
|[aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity)| data source |
221
+
|[aws_iam_policy_document.bucket_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document)| data source |
222
+
|[aws_iam_policy_document.bucket_policy_redirect](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document)| data source |
223
+
224
+
## Inputs
225
+
226
+
| Name | Description | Type | Default | Required |
| <aname="input_cloudfront_origin_path"></a> [cloudfront\_origin\_path](#input\_cloudfront\_origin\_path)| Origin path of CloudFront |`string`|`""`| no |
229
+
| <aname="input_content_security_policy"></a> [content\_security\_policy](#input\_content\_security\_policy)| Default Content Security Policy to use when no custom CSP is provided in request headers |`string`|`"default-src 'none'; img-src 'self'; script-src 'self' 'nonce-%{SCRIPT_NONCE}%%'; style-src 'self' 'nonce-%{STYLE_NONCE}%%'; object-src 'none'"`| no |
230
+
| <aname="input_cors_allowed_origins"></a> [cors\_allowed\_origins](#input\_cors\_allowed\_origins)| CORS allowed origins |`list(string)`|`[]`| no |
231
+
| <aname="input_domain_names"></a> [domain\_names](#input\_domain\_names)| domain names to serve site on |`list(string)`| n/a | yes |
232
+
| <aname="input_enable_acm_validation"></a> [enable\_acm\_validation](#input\_enable\_acm\_validation)| Validates ACM by updating route 53 DNS |`bool`|`false`| no |
233
+
| <aname="input_enable_compression"></a> [enable\_compression](#input\_enable\_compression)| Toggle whether the default cache behaviour has compression enabled |`bool`|`true`| no |
234
+
| <aname="input_enable_nonce"></a> [enable\_nonce](#input\_enable\_nonce)| Enable nonce injection for Content Security Policy |`bool`|`false`| no |
235
+
| <aname="input_forward_query_string"></a> [forward\_query\_string](#input\_forward\_query\_string)| forward query strings to origin |`bool`|`false`| no |
236
+
| <aname="input_lambda_function_associations"></a> [lambda\_function\_associations](#input\_lambda\_function\_associations)| CloudFront Lambda function associations. key is CloudFront event type and value is an object with 'arn' (Lambda function ARN with version) and 'include\_body' (whether to include request/response body) fields. For nonce injection, this is automatically populated with the nonce-injector Lambda. | <pre>map(object({<br> arn = string<br> include_body = bool<br> }))</pre> |`{}`| no |
237
+
| <aname="input_main_default_ttl"></a> [main\_default\_ttl](#input\_main\_default\_ttl)| default TTL of the main cloudfront distribution |`number`|`180`| no |
238
+
| <aname="input_ordered_cache_behaviors"></a> [ordered\_cache\_behaviors](#input\_ordered\_cache\_behaviors)| Ordered cache behaviors with Lambda function associations | <pre>list(object({<br> path = string<br> lambda_function_associations = map(object({<br> arn = string<br> include_body = bool<br> }))<br> }))</pre> |`[]`| no |
239
+
| <aname="input_permissions_boundary"></a> [permissions\_boundary](#input\_permissions\_boundary)| If provided, all IAM roles will be created with this permissions boundary attached. |`string`|`""`| no |
240
+
| <aname="input_redirect_domain_names"></a> [redirect\_domain\_names](#input\_redirect\_domain\_names)| domain names to redirect to `domain_names`|`list(string)`| n/a | yes |
241
+
| <aname="input_route53_zone_id"></a> [route53\_zone\_id](#input\_route53\_zone\_id)| Route53 Zone ID |`string`|`""`| no |
242
+
| <aname="input_s3_logging_bucket"></a> [s3\_logging\_bucket](#input\_s3\_logging\_bucket)| Bucket which will store s3 access logs |`string`|`""`| no |
243
+
| <aname="input_s3_logging_bucket_prefix"></a> [s3\_logging\_bucket\_prefix](#input\_s3\_logging\_bucket\_prefix)| Bucket which will store s3 access logs |`string`|`""`| no |
244
+
| <aname="input_save_access_log"></a> [save\_access\_log](#input\_save\_access\_log)| whether save cloudfront access log to S3 |`bool`|`false`| no |
245
+
| <aname="input_service_name"></a> [service\_name](#input\_service\_name)| tagged with service name |`any`| n/a | yes |
246
+
| <aname="input_web_acl_id"></a> [web\_acl\_id](#input\_web\_acl\_id)| WAF ACL to attach to the cloudfront distribution |`string`|`""`| no |
247
+
248
+
## Outputs
249
+
250
+
| Name | Description |
251
+
|------|-------------|
252
+
| <aname="output_acm_arn"></a> [acm\_arn](#output\_acm\_arn)| ARN of acm certificate |
| <aname="output_cache_invalidation_command"></a> [cache\_invalidation\_command](#output\_cache\_invalidation\_command)| CloudFront edge cache invalidation command. /path/to/invalidation/resource is like /index.html /error.html |
257
+
| <aname="output_cache_invalidation_redirect_command"></a> [cache\_invalidation\_redirect\_command](#output\_cache\_invalidation\_redirect\_command)| CloudFront edge cache invalidation command. /path/to/invalidation/resource is like /index.html /error.html |
258
+
| <aname="output_cloudfront_distribution_main_arn"></a> [cloudfront\_distribution\_main\_arn](#output\_cloudfront\_distribution\_main\_arn)| ARN of cloudfront distribution |
259
+
| <aname="output_cloudfront_distribution_main_domain_name"></a> [cloudfront\_distribution\_main\_domain\_name](#output\_cloudfront\_distribution\_main\_domain\_name)| Domain URL of cloudfront distribution |
260
+
| <aname="output_cloudfront_distribution_main_etag"></a> [cloudfront\_distribution\_main\_etag](#output\_cloudfront\_distribution\_main\_etag)| ETag of cloudfront distribution |
261
+
| <aname="output_cloudfront_distribution_main_hosted_zone_id"></a> [cloudfront\_distribution\_main\_hosted\_zone\_id](#output\_cloudfront\_distribution\_main\_hosted\_zone\_id)| hosted zone id of cloudfront distribution |
262
+
| <aname="output_cloudfront_distribution_redirect_arn"></a> [cloudfront\_distribution\_redirect\_arn](#output\_cloudfront\_distribution\_redirect\_arn)| ARN of cloudfront distribution |
263
+
| <aname="output_cloudfront_distribution_redirect_domain_name"></a> [cloudfront\_distribution\_redirect\_domain\_name](#output\_cloudfront\_distribution\_redirect\_domain\_name)| Domain URL of cloudfront distribution |
264
+
| <aname="output_cloudfront_distribution_redirect_etag"></a> [cloudfront\_distribution\_redirect\_etag](#output\_cloudfront\_distribution\_redirect\_etag)| ETag of cloudfront distribution |
265
+
| <aname="output_cloudfront_distribution_redirect_hosted_zone_id"></a> [cloudfront\_distribution\_redirect\_hosted\_zone\_id](#output\_cloudfront\_distribution\_redirect\_hosted\_zone\_id)| hosted zone id of cloudfront distribution |
266
+
| <aname="output_s3_main_arn"></a> [s3\_main\_arn](#output\_s3\_main\_arn)| ARN of s3 hosting index.html of site |
0 commit comments