Add cloudfront distribution restriction (#148)

* Update json policy * Update policy format * Update storage.tf to remove duplicate data reference * Set no restriction on cloudfront distribution
UKHomeOffice · Jul 22, 2024 · da11a91 · da11a91
1 parent 87de0e4
commit da11a91
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/modules/aws/ai_opt_out/variables.tf b/modules/aws/ai_opt_out/variables.tf
@@ -15,3 +15,4 @@ variable "apply_to_ous_or_accounts" {
   description = "A list of AWS Organization OU IDs or AWS Account IDs that should have the Policies applied (can be empty)."
   default     = []
 }
+
diff --git a/modules/products/static-site/cloudfront.tf b/modules/products/static-site/cloudfront.tf
@@ -44,6 +44,12 @@ resource "aws_cloudfront_distribution" "static_site_distribution" {
     max_ttl                = 86400
   }
 
+  restrictions {
+    geo_restriction {
+      restriction_type = "none"
+    }
+  }
+
   price_class = var.cloud_front_vars.cloudfront_price_class
 
   tags = local.common_tags