try without vpc

Author: mishraomp

infrastructure/api/alb.tf

@@ -59,18 +59,3 @@ resource "aws_lb_target_group" "app" {
 
   tags = module.common.common_tags
 }
-resource "aws_cloudfront_vpc_origin" "alb" {
-  vpc_origin_endpoint_config {
-    name                   = var.app_name
-    arn                    = aws_lb.app-alb.arn
-    http_port              = 80
-    https_port             = 443
-    origin_protocol_policy = "https-only"
-
-    origin_ssl_protocols {
-      items    = ["TLSv1.2"]
-      quantity = 1
-    }
-  }
-  tags = module.common.common_tags
-}

infrastructure/api/waf.tf

@@ -45,14 +45,15 @@ module "cloudfront_api" {
   distribution_type = "alb" # Using ALB as the origin
   enabled          = true
 
-  # API Origin Configuration
-  #api_origin_domain_name     = "${module.api_gateway.api_id}.execute-api.${var.aws_region}.amazonaws.com"
-  #api_origin_id             = "http-api-origin"
-  #api_origin_protocol_policy = "https-only"
-  #api_origin_ssl_protocols   = ["TLSv1.2"]
+  # ALB Origin Configuration
   alb_origin_domain_name = aws_lb.app-alb.dns_name
   alb_origin_id          = "api-alb-origin"
-  alb_vpc_origin_id = aws_cloudfront_vpc_origin.alb.id
+  
+  # Use API origin settings for ALB (since we're using custom_origin_config)
+  api_origin_protocol_policy = "http-only"
+  api_origin_http_port       = 80
+  api_origin_https_port      = 443
+  api_origin_ssl_protocols   = ["TLSv1.2"]
   # WAF Integration
   web_acl_arn = module.waf_api[0].web_acl_arn
 

infrastructure/modules/cloudfront/main.tf

@@ -52,12 +52,14 @@ resource "aws_cloudfront_distribution" "this" {
     content {
       domain_name = var.alb_origin_domain_name
       origin_id   = var.alb_origin_id
-      vpc_origin_config {
-        vpc_origin_id = var.alb_vpc_origin_id
+      
+      custom_origin_config {
+        origin_protocol_policy = var.api_origin_protocol_policy  # Reuse API origin settings
+        http_port              = var.api_origin_http_port
+        https_port             = var.api_origin_https_port
+        origin_ssl_protocols   = var.api_origin_ssl_protocols
       }
     }
-    
-    
   }