Feat: Static Web Application Distribution #74
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| ## Static Web Application Distribution With CloudFront and S3 | ||
| ### Overview | ||
| The simplest way to deploy the static website is to store the content in Amazon S3 (Simple Storage Service) and distribute it using CloudFront (Content Delivery Network). | ||
|
|
||
|
|
@@ -37,4 +37,32 @@ OAC also enhances security measures by supporting shorter credential durations a | |
| 3. Compliance with Legal Requirements: Some industries or legal requirements may mandate the retention of access logs and their accessibility when needed to comply with regulations. | ||
|
|
||
| #### CloudFront Cache | ||
| - [Understanding AWS CloudFront Caching: A Guide for Beginners](https://aws.plainenglish.io/understanding-aws-cloudfront-caching-a-guide-for-beginners-ce0169d3c724) | ||
|
|
||
| ### How to deploy | ||
| > [!NOTE] | ||
| > Before running `make deploy`, ensure you have configured AWS credentials and set the correct region. Otherwise, you use single sign-on (SSO). | ||
|
|
||
| ```shell | ||
| $ make deploy | ||
| ``` | ||
|
|
||
| If you want to upload the content of the static website to S3, you can use the following command: | ||
|
|
||
| ```shell | ||
| aws s3 cp ./static-website s3://<your-bucket-name> --recursive | ||
| ``` | ||
|
|
||
| For example, if you upload the index.html file to the S3 bucket, you can use the following command: | ||
|
|
||
| ```shell | ||
| aws s3 cp ./index.html s3://content-bucket-rainbow-spa | ||
| ``` | ||
|
|
||
| After deployment, you can access the static website. The URL syntax for the CloudFront distribution is as follows: | ||
|
|
||
| ``` | ||
| https://<distribution-id>.cloudfront.net | ||
| ``` | ||
|
|
||
|  | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,12 @@ | ||
| <!DOCTYPE html> | ||
| <html lang="en"> | ||
| <head> | ||
| <meta charset="UTF-8"> | ||
| <meta name="viewport" content="width=device-width, initial-scale=1.0"> | ||
| <title>Simple Page</title> | ||
| </head> | ||
| <body> | ||
| <h1>Hello, World!</h1> | ||
| <p>This is a simple HTML page.</p> | ||
| </body> | ||
| </html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,6 +1,6 @@ | ||
| [ | ||
| { | ||
| "ParameterKey" : "ContentBucketName", | ||
| "ParameterValue" : "content-bucket-rainbow-spa" | ||
| } | ||
| ] |
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -11,15 +11,9 @@ Resources: | |
| UpdateReplacePolicy: Retain | ||
| DeletionPolicy: Retain | ||
| Properties: | ||
| BucketName: !Sub "${ContentBucketName}" | ||
| VersioningConfiguration: | ||
| Status: Enabled | ||
| ObjectLockEnabled: true | ||
| OwnershipControls: | ||
| Rules: | ||
|
|
@@ -33,16 +27,6 @@ Resources: | |
| ServerSideEncryptionConfiguration: | ||
| - ServerSideEncryptionByDefault: | ||
| SSEAlgorithm: AES256 | ||
|
|
||
| ContentBucketPolicy: | ||
| Type: AWS::S3::BucketPolicy | ||
|
|
@@ -51,38 +35,47 @@ Resources: | |
| PolicyDocument: | ||
| Version: "2012-10-17" | ||
| Statement: | ||
| - Sid: "DenyNonSecureConnections" | ||
| Action: "s3:*" | ||
| Effect: Deny | ||
| Principal: "*" | ||
| Resource: | ||
| - !Sub "arn:aws:s3:::${ContentBucketName}/*" | ||
| - !Sub "arn:aws:s3:::${ContentBucketName}" | ||
| Condition: | ||
| Bool: | ||
| "aws:SecureTransport": false | ||
| - Sid: "AllowCloudFrontToGetContent" | ||
| Effect: Allow | ||
| Principal: | ||
| Service: "cloudfront.amazonaws.com" | ||
| Action: | ||
| - "s3:GetObject" | ||
| - "s3:ListBucket" | ||
| Resource: | ||
| - !Sub "arn:aws:s3:::${ContentBucketName}/*" | ||
| - !Sub "arn:aws:s3:::${ContentBucketName}" | ||
| Condition: | ||
| Bool: | ||
| "aws:SecureTransport": true | ||
|
|
||
| LogBucket: | ||
| Type: "AWS::S3::Bucket" | ||
| UpdateReplacePolicy: Retain | ||
| DeletionPolicy: Retain | ||
| Properties: | ||
| BucketName: !Sub "${ContentBucketName}-log" | ||
| VersioningConfiguration: | ||
| Status: Enabled | ||
| PublicAccessBlockConfiguration: | ||
| BlockPublicAcls: true | ||
| BlockPublicPolicy: true | ||
| IgnorePublicAcls: true | ||
| RestrictPublicBuckets: true | ||
| BucketEncryption: | ||
| ServerSideEncryptionConfiguration: | ||
| - ServerSideEncryptionByDefault: | ||
| SSEAlgorithm: AES256 | ||
| ObjectLockConfiguration: | ||
| ObjectLockEnabled: Enabled | ||
| Rule: | ||
|
|
@@ -92,35 +85,82 @@ Resources: | |
| ObjectLockEnabled: true | ||
| OwnershipControls: | ||
| Rules: | ||
| - ObjectOwnership: ObjectWriter | ||
|
|
||
| CloufFrontDistribution: | ||
| Type: "AWS::CloudFront::Distribution" | ||
| Properties: | ||
| DistributionConfig: | ||
| Comment: "CloudFront Distribution" | ||
| Origins: | ||
| - DomainName: !GetAtt ContentBucket.RegionalDomainName | ||
| Id: "S3Origin" | ||
| OriginAccessControlId: !Ref CloudFrontOriginAccessControl | ||
| S3OriginConfig: | ||
| OriginAccessIdentity: "" | ||
| DefaultRootObject: "index.html" | ||
| Enabled: true | ||
| DefaultCacheBehavior: | ||
| TargetOriginId: "S3Origin" | ||
| CachePolicyId: !Ref OriginCachePolicy | ||
| OriginRequestPolicyId: !Ref OriginRequestPolicy | ||
| AllowedMethods: | ||
| - GET | ||
| - HEAD | ||
| - OPTIONS | ||
| ForwardedValues: | ||
| QueryString: false | ||
| ViewerProtocolPolicy: "redirect-to-https" | ||
| DefaultTTL: 1 | ||
| MaxTTL: 1 | ||
| MinTTL: 1 | ||
| PriceClass: "PriceClass_100" | ||
| Logging: | ||
| Bucket: !GetAtt LogBucket.DomainName | ||
| IncludeCookies: false | ||
| Prefix: "logs/" | ||
| HttpVersion: "http2and3" | ||
| IPV6Enabled: true | ||
| ViewerCertificate: | ||
| CloudFrontDefaultCertificate: true | ||
|
|
||
| CloudFrontOriginAccessControl: | ||
| Type: "AWS::CloudFront::OriginAccessControl" | ||
| Properties: | ||
| OriginAccessControlConfig: | ||
| Name: "Origin Accress Control for S3 bucket" | ||
| OriginAccessControlOriginType: s3 | ||
| SigningBehavior: always | ||
| SigningProtocol: sigv4 | ||
|
|
||
| OriginRequestPolicy: | ||
| Type: "AWS::CloudFront::OriginRequestPolicy" | ||
| Properties: | ||
| OriginRequestPolicyConfig: | ||
| Name: !Sub "${AWS::StackName}-cloudfront-request-policy" | ||
| Comment: "Origin Request Policy for S3 bucket" | ||
| CookiesConfig: | ||
| CookieBehavior: none | ||
| HeadersConfig: | ||
| HeaderBehavior: none | ||
| QueryStringsConfig: | ||
| QueryStringBehavior: none | ||
|
|
||
| OriginCachePolicy: | ||
| Type: "AWS::CloudFront::CachePolicy" | ||
| Properties: | ||
| CachePolicyConfig: | ||
| Name: !Sub "${AWS::StackName}-cloudfront-cache-policy" | ||
| Comment: "Cache Policy for S3 bucket" | ||
| DefaultTTL: 1 | ||
| MaxTTL: 1 | ||
| MinTTL: 1 | ||
| ParametersInCacheKeyAndForwardedToOrigin: | ||
| CookiesConfig: | ||
| CookieBehavior: none | ||
| HeadersConfig: | ||
| HeaderBehavior: none | ||
| QueryStringsConfig: | ||
| QueryStringBehavior: none | ||
| EnableAcceptEncodingGzip: true | ||
| EnableAcceptEncodingBrotli: true | ||
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The addition of
--region ap-northeast-1parameter ensures that the deployment is targeted to the specified AWS region. This is a good practice for clarity and control over deployment locations. However, consider making the region a variable to enhance flexibility and reusability of the Makefile across different AWS regions.Committable suggestion