added changes for public site

sailpoint-oss · Sep 6, 2024 · 4fe6a75 · 4fe6a75
1 parent d06a553
commit 4fe6a75
Showing 1 changed file with 12 additions and 5 deletions.
diff --git a/template.yaml b/template.yaml
@@ -133,6 +133,9 @@ Resources:
       BucketEncryption:
         ServerSideEncryptionConfiguration:
           - BucketKeyEnabled: true
+      WebsiteConfiguration:
+        IndexDocument: index.html
+        ErrorDocument: 404.html
   DeveloperSailpointWebSiteBucketPolicy:
     Type: "AWS::S3::BucketPolicy"
     Properties:
@@ -150,18 +153,22 @@ Resources:
           Condition:
             StringEquals:
               "AWS:SourceArn": !Join [ "", [ "arn:aws:cloudfront::", !Ref "AWS::AccountId", ":distribution/", !Ref DeveloperSailpointCloudFrontDistribution ] ]
-
+        - Sid: "PublicReadGetObject"
+          Effect: "Allow"
+          Principal: "*"
+          Action:
+            - "s3:GetObject"
+          Resource: !Join [ "", [ "arn:aws:s3:::", !Ref DeveloperSailpointWebSiteBucket, "/*" ] ]
   # CloudFront Distribution for hosting the single page app website
   DeveloperSailpointCloudFrontDistribution:
     Type: "AWS::CloudFront::Distribution"
     Properties:
       DistributionConfig:
         Origins:
-        - DomainName: !GetAtt DeveloperSailpointWebSiteBucket.RegionalDomainName
+        - DomainName: !Join ["", [!Ref DeveloperSailpointWebSiteBucket, ".s3-website-", !Ref "AWS::Region", ".amazonaws.com"]]
           Id: "DeveloperSailpointWebS3Origin"
-          OriginAccessControlId: !GetAtt CloudFrontOriginAccessControl.Id
-          S3OriginConfig: 
-            OriginAccessIdentity: ""
+          CustomOriginConfig:
+            OriginProtocolPolicy: "http-only"
         Enabled: true
         DefaultRootObject: "index.html"
         HttpVersion: "http2"