CCL-497 updated aws_iam_policy_document

modules/products/static-site/cloudfront.tf

@@ -46,18 +46,19 @@ resource "aws_cloudfront_distribution" "static_site_distribution" {
 
     function_association {
       event_type   = "viewer-request"
-      function_arn   = aws_cloudfront_function.rewritedefaultindexrequest.arn
+      function_arn = aws_cloudfront_function.rewritedefaultindexrequest.arn
     }
 
+  }
+
   custom_error_response {
-    error_code          = 404
-    response_page_path  = "/404.html" # Path to your custom error page
-    response_code       = 404
+    error_code            = 404
+    response_page_path    = "/404.html" # Path to your custom error page
+    response_code         = 404
     error_caching_min_ttl = 10 # Cache TTL in seconds
-      }
-
   }
 
+
   restrictions {
     geo_restriction {
       restriction_type = "none"

modules/products/static-site/storage.tf

@@ -52,6 +52,19 @@ data "aws_iam_policy_document" "static_site_iam_storage_policy_document" {
       values   = [aws_cloudfront_distribution.static_site_distribution.arn]
     }
   }
+  statement {
+    actions = [
+      "s3:ListBucket"
+    ]
+    resources = [
+      "arn:aws:s3:::${aws_s3_bucket.static_site.id}"
+    ]
+    condition {
+      test     = "StringEquals"
+      variable = "aws:SourceArn"
+      values   = [aws_cloudfront_distribution.static_site_distribution.arn]
+    }
+  }
 }
 
 resource "aws_s3_bucket_policy" "static_site_policy" {