Skip to content

Conversation

alukach
Copy link
Contributor

@alukach alukach commented Jun 3, 2025

In pursuit of tnc-ca-geo/animl-api#38, I propose that we create a private cloudfront distribution alongside the current cloudfront distribution to simplify the transition to requiring signed-urls/signed-cookies.

This PR:

  1. Add a script to generate public/private keys and to store them in AWS Parameter Store
  2. Adds Serverless template configuration for a private CloudFront Distribution and supporting key. This makes use of the existing OriginAccessIdentity
  3. Add documentation

@alukach alukach force-pushed the feature/private-cloudfront-distribution branch from 64f6c37 to e9a72e3 Compare June 3, 2025 20:55
@alukach
Copy link
Contributor Author

alukach commented Jun 10, 2025

@nathanielrindlaub In 777a77b, I've moved the logic of creating our keys to a custom resource lambda function1

Footnotes

  1. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-custom-resources.html

Copy link
Member

@nathanielrindlaub nathanielrindlaub left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@alukach this looks great. Thanks for moving the key generation into CF via the Lambda custom resource. I did not know you could do that! Super cool.

@nathanielrindlaub nathanielrindlaub merged commit d7580e9 into master Jun 11, 2025
3 checks passed
@nathanielrindlaub nathanielrindlaub deleted the feature/private-cloudfront-distribution branch June 11, 2025 18:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants