infrastructure.ts

import * as cdk from '@aws-cdk/core';
import * as s3 from '@aws-cdk/aws-s3';
import * as cloudfront from '@aws-cdk/aws-cloudfront';

export class InfrastructureStack extends cdk.Stack {
  constructor(scope: cdk.Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    const bucket = new s3.Bucket(this, 'WebsiteBucket', {
      bucketName: 'andrew-bestbier-cdk-blog',
      websiteIndexDocument: 'index.html',
    });

    const cloudFrontOAI = new cloudfront.OriginAccessIdentity(this, 'OAI');

    bucket.grantRead(cloudFrontOAI.grantPrincipal);
  }
}