Terraform AWS Static Site

This module provisions a static website using CloudFront+S3. Optionally, the website can be protected with OpenID Connect.

Usage

module "static_site" {
  source = "github.com/chatloop/terraform-aws-static-site?ref=v1.1.0"

  providers = {
    aws.us-east-1 = aws.us-east-1
  }

  acm_certificate_name = "example.com"
  domain_name          = "static-site-test.example.com"
  name                 = "terraform-aws-static-site"
  route53_zone_name    = "example.com"
}

Requirements

Name	Version
terraform	~> 1.0
aws	~> 5.0
random	~> 3.0

Providers

Name	Version
aws	~> 5.0
aws.us-east-1	~> 5.0
random	~> 3.0

Modules

Name	Source	Version
authorizer	github.com/chatloop/terraform-aws-cloudfront-auth	695c3eb440a90e2441a006f9d091e6f73218fb0d
cloudfront	github.com/terraform-aws-modules/terraform-aws-cloudfront	a0f0506106a4c8815c1c32596e327763acbef2c2
s3_bucket	github.com/terraform-aws-modules/terraform-aws-s3-bucket	8a0b697adfbc673e6135c70246cff7f8052ad95a
website_configuration	github.com/terraform-aws-modules/terraform-aws-lambda	1d122404c2a3834ce39a7c5a319a3e754d5b0c29

Resources

Name	Type
aws_route53_record.this	resource
random_string.refer_secret	resource
aws_acm_certificate.this	data source
aws_iam_policy_document.s3_policy	data source
aws_iam_policy_document.s3_policy_cloudfront_oac	data source
aws_iam_policy_document.s3_policy_website_endpoint	data source
aws_route53_zone.this	data source

Inputs

Name	Description	Type	Default	Required
acm_certificate_arn	n/a	string	null	no
acm_certificate_name	n/a	string	null	no
aliases	n/a	list(string)	[]	no
authorizer	n/a	object({ function_name = optional(string) tenant = string client_id = string client_secret = string redirect_uri = optional(string) session_duration = optional(number) trailing_slash_redirects_enabled = optional(bool) simple_urls_enabled = optional(bool) })	null	no
bucket_name	n/a	string	null	no
comment	n/a	string	null	no
custom_error_response	n/a	list(object({ error_code = number response_code = number response_page_path = optional(string) error_caching_min_ttl = optional(number) }))	[]	no
default_cache_behavior	n/a	object({ allowed_methods = optional(list(string), ["GET", "HEAD", "OPTIONS"]) cached_methods = optional(list(string), ["GET", "HEAD", "OPTIONS"]) compress = optional(bool, true) cache_policy_id = optional(string) cache_policy_name = optional(string, "Managed-CachingOptimized") origin_request_policy_id = optional(string) origin_request_policy_name = optional(string, "Managed-CORS-S3Origin") response_headers_policy_id = optional(string) response_headers_policy_name = optional(string, "Managed-SecurityHeadersPolicy") target_origin_id = optional(string) use_authorizer = optional(bool, true) viewer_protocol_policy = optional(string, "redirect-to-https") })	{}	no
default_root_object	n/a	string	"index.html"	no
domain_name	n/a	string	n/a	yes
name	n/a	string	n/a	yes
ordered_cache_behavior	n/a	list(object({ allowed_methods = optional(list(string), ["GET", "HEAD", "OPTIONS"]) cached_methods = optional(list(string), ["GET", "HEAD", "OPTIONS"]) compress = optional(bool, true) cache_policy_id = optional(string) cache_policy_name = optional(string, "Managed-CachingOptimized") origin_request_policy_id = optional(string) origin_request_policy_name = optional(string, "Managed-CORS-S3Origin") path_pattern = string response_headers_policy_id = optional(string) response_headers_policy_name = optional(string, "Managed-SecurityHeadersPolicy") target_origin_id = optional(string) use_authorizer = optional(bool, true) viewer_protocol_policy = optional(string, "redirect-to-https") }))	[]	no
route53_zone_name	n/a	string	null	no
website_configuration	n/a	object({ index_document = optional(string) redirect_all_requests_to = optional(object({ host_name = string protocol = optional(string) })) })	null	no

Outputs

Name	Description
cloudfront_domain_name	n/a