hafizpatwary

// This cloudfront function rewrites request on the fly to match path on the origin
// Note: cloudfront function only support ECMAScript (ES) version 5.1
// unlike lambda@edge cloudfront function are mighty quick Read more: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-functions.html

function handler(event) {
  var request = event.request;
  console.log(request);

  if (request.uri.startsWith("/cook/")) {
    request.uri = request.uri.replace("/cook/", "/"); // removes the first occurrence of /cook/

hafizpatwary

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "EnforceCostCenterTag",
            "Effect": "Deny",
            "Action": [
                "events:CreateEventBus",
                "iam:CreatePolicy",
                "iam:CreateRole",

hafizpatwary

{
    "tags": {
      "CostCenter": {
        "tag_key": {
          "@@assign": "CostCenter"
        },
        "tag_value": {
          "@@assign": [
            "potato",
            "tomato",

hafizpatwary

data "aws_eks_cluster" "cluster" {
  name = var.cluster_name
}

data "aws_route_table" "selected" {
  for_each = toset(data.aws_eks_cluster.cluster.vpc_config[0].subnet_ids)
  subnet_id = each.key
}

locals {

hafizpatwary

provider "aws" {}

locals {
  github_actions_thumbprints = [
    "1c58a3a8518e8759bf075b76b750d4f2df264fcd",
    "6938fd4d98bab03faadb97b34396831e3780aea1"
  ]
}

data "tls_certificate" "github_actions" {

hafizpatwary

name: Build infra
 
on:
  push:
    branches: [main]
 
permissions:
  id-token: write # Required to get the ID Token that will be used for OIDC
  contents: read  # This is required for actions/checkout

hafizpatwary

data "aws_caller_identity" "current" {}

locals {
  account_id = data.aws_caller_identity.current.account_id
}

resource "aws_iam_role" "gha_terraform" {
  name = "github-action-terraform"
  assume_role_policy = jsonencode({
    Statement = [{

hafizpatwary

provider "aws" {}

locals {
  providers = {
    "GithubActions" = {
      "url": "https://token.actions.githubusercontent.com",
      "thumbprints": [
        "1c58a3a8518e8759bf075b76b750d4f2df264fcd",
        "6938fd4d98bab03faadb97b34396831e3780aea1"
      ]

hafizpatwary

- name: Setup aws secrets
  uses: aws-actions/configure-aws-credentials@v2
  with:
    aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
    aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}