cloudfront_nathanielsigal_com.tf

# ------------------------------------------------------------------------------------------
# nathanielsigal.com

resource "aws_cloudfront_distribution" "nathanielsigal_com" {
  aliases = [
    "nathanielsigal.com",
    "www.nathanielsigal.com",
    "natesigal.com",
    "www.natesigal.com",
  ]
  custom_error_response {
    error_caching_min_ttl = 300
    error_code            = 403
    response_code         = 403
    response_page_path    = "/403.html"
  }
  custom_error_response {
    error_caching_min_ttl = 300
    error_code            = 404
    response_code         = 404
    response_page_path    = "/404.html"
  }
  default_root_object = "index.html"
  default_cache_behavior {
    allowed_methods = [
      "GET",
      "HEAD",
    ]
    cached_methods = [
      "GET",
      "HEAD",
    ]
    cache_policy_id            = local.managed_cloudfront_caching_optimized_policy_id
    compress                   = true
    response_headers_policy_id = aws_cloudfront_response_headers_policy.custom_response_headers_policy_default.id
    target_origin_id           = "S3-nathanielsigal.com"
    viewer_protocol_policy     = "redirect-to-https"
  }
  enabled         = true
  is_ipv6_enabled = true
  origin {
    domain_name = "nathanielsigal.com.s3.amazonaws.com"
    origin_id   = "S3-nathanielsigal.com"
    s3_origin_config {
      origin_access_identity = aws_cloudfront_origin_access_identity.identities["nathanielsigal.com"].cloudfront_access_identity_path
    }
  }
  restrictions {
    geo_restriction {
      restriction_type = "none"
      locations        = []
    }
  }
  viewer_certificate {
    acm_certificate_arn      = aws_acm_certificate.nathanielsigal_com.arn
    minimum_protocol_version = "TLSv1.2_2021"
    ssl_support_method       = "sni-only"
  }
}