cloudposse/cloudfront-s3-cdn
Terraform module to provision CloudFront CDN backed by an S3 origin.
About
Terraform module to provision CloudFront CDN backed by an S3 origin.
Maintained by cloudposse on the Terraform Registry. Latest version 2.1.1, 3.1M downloads. Requires providers: aws >= 6.13.0; random >= 2.2; time >= 0.7.
Deploy creates a StackGuardian workflow from the module's GitHub repository, pinned to this version. You set the inputs, see the plan, then approve the apply.
Use cases
- Buckets or volumes with encryption, versioning and lifecycle rules enforced by policy.
- Artifact, log and backup storage created per environment.
- Static sites or data lakes with access limited to named principals.
Inputs
No required inputs. Every variable has a default, so the first run works with an empty input form.
120 inputs in total. The full list, with defaults and descriptions, is on the registry page.
What it creates
aws_cloudfront_distributionaws_cloudfront_origin_access_controlaws_cloudfront_origin_access_identityaws_cloudfront_monitoring_subscriptionaws_s3_bucketaws_s3_bucket_policyaws_s3_bucket_aclaws_s3_bucket_cors_configurationaws_s3_bucket_ownership_controlsaws_s3_bucket_public_access_block
How it runs on StackGuardian
Terraform workflow from the module's GitHub repository: plan, policy check, approval, then apply.
Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.