feat(cloudfront): allow to set cloudfront restrictions settings

cookielab · Dec 17, 2024 · b3a8c2b · b3a8c2b
1 parent 1bb5691
commit b3a8c2b
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -313,7 +313,8 @@ resource "aws_cloudfront_distribution" "this" {
 
   restrictions {
     geo_restriction {
-      restriction_type = "none"
+      restriction_type = var.restriction_type
+      locations        = var.restrictions_locations
     }
   }
 

diff --git a/variables.tf b/variables.tf
@@ -68,6 +68,18 @@ variable "tags" {
   default = {}
 }
 
+variable "restriction_type" {
+  description = "Apply for geo restrictions, values: none, whitelist, blacklist"
+  type        = string
+  default     = "none"
+}
+
+variable "restrictions_locations" {
+  description = "List of country codes"
+  type        = list(string)
+  default     = null
+}
+
 variable "proxy_paths" {
   type = list(object({
     origin_domain = string