Skip to content

Instantly share code, notes, and snippets.

@cliffano
Created May 26, 2016 22:42
Show Gist options
  • Save cliffano/5dc8fe7ec49b6a945305a0e8704b4cfa to your computer and use it in GitHub Desktop.
Save cliffano/5dc8fe7ec49b6a945305a0e8704b4cfa to your computer and use it in GitHub Desktop.
Terraform configuration for setting up S3 static site bucket with a Route53 A record.
variable "bucket_site" {}
variable "region" {}
variable "route53_domain_name" {}
variable "route53_domain_zoneid" {}
variable "route53_domain_alias_name" {}
variable "route53_domain_alias_zoneid" {}
provider "aws" {
region = "${var.region}"
}
resource "aws_s3_bucket" "site" {
bucket = "${var.bucket_site}"
acl = "public-read"
policy = <<EOF
{
"Id": "bucket_policy_site",
"Version": "2012-10-17",
"Statement": [
{
"Sid": "bucket_policy_site_main",
"Action": [
"s3:GetObject"
],
"Effect": "Allow",
"Resource": "arn:aws:s3:::${var.bucket_site}/*",
"Principal": "*"
}
]
}
EOF
website {
index_document = "index.html"
error_document = "404.html"
}
tags {
}
force_destroy = true
}
resource "aws_route53_record" "domain" {
name = "${var.route53_domain_name}"
zone_id = "${var.route53_domain_zoneid}"
type = "A"
alias {
name = "${var.route53_domain_alias_name}"
zone_id = "${var.route53_domain_alias_zoneid}"
evaluate_target_health = true
}
}
@FLGMwt
Copy link

FLGMwt commented Apr 24, 2017

Hi there! Thanks for this.

Question though: why does this have an acl and a bucket policy for gets?

@serant
Copy link

serant commented Jun 24, 2018

FLGMwt brings up a good point. This shouldn't need to specify both an ACL and a bucket policy for gets. ACLs are legacy (although not deprecated), and Amazon highly recommends sticking to IAM/bucket policies instead. The bucket policy for gets should be sufficient on its own.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment