30 lines
1.5 KiB
Diff
30 lines
1.5 KiB
Diff
--- /home/vignesh/github/Tiproemail/aws_cdk/lib/betasupplier-site-stack.ts
|
|
+++ /home/vignesh/github/Tiproemail/aws_cdk/lib/betasupplier-site-stack.ts
|
|
@@ -19,13 +19,25 @@
|
|
|
|
+ const ec2Origin = new origins.HttpOrigin('ec2-16-113-57-127.ap-south-2.compute.amazonaws.com', {
|
|
+ protocolPolicy: cloudfront.OriginProtocolPolicy.HTTPS_ONLY,
|
|
+ });
|
|
+
|
|
// 2. Create CloudFront Distribution
|
|
// origins.S3Origin will automatically create an Origin Access Identity (OAI)
|
|
// and update the S3 bucket policy to allow access only from this CloudFront distribution.
|
|
const distribution = new cloudfront.Distribution(this, 'BetaSupplierSiteDistribution', {
|
|
defaultRootObject: 'index.html',
|
|
defaultBehavior: {
|
|
origin: new origins.S3Origin(websiteBucket),
|
|
viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
|
|
allowedMethods: cloudfront.AllowedMethods.ALLOW_GET_HEAD,
|
|
cachedMethods: cloudfront.CachedMethods.CACHE_GET_HEAD,
|
|
cachePolicy: cloudfront.CachePolicy.CACHING_OPTIMIZED,
|
|
},
|
|
+ additionalBehaviors: {
|
|
+ '/api/*': {
|
|
+ origin: ec2Origin,
|
|
+ viewerProtocolPolicy: cloudfront.ViewerProtocolPolicy.REDIRECT_TO_HTTPS,
|
|
+ allowedMethods: cloudfront.AllowedMethods.ALLOW_ALL,
|
|
+ cachePolicy: cloudfront.CachePolicy.CACHING_DISABLED,
|
|
+ originRequestPolicy: cloudfront.OriginRequestPolicy.ALL_VIEWER,
|
|
+ }
|
|
+ },
|
|
errorResponses: [
|