enable cf permissions again

explore-flights · May 4, 2024 · f1a0d70 · f1a0d70
1 parent f3c24db
commit f1a0d70
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/cdk/lib/constructs/ui-resources-construct.ts b/cdk/lib/constructs/ui-resources-construct.ts
@@ -35,6 +35,7 @@ export class UIResourcesConstruct extends Construct {
 
   private grantReadInternal(distributionArn: string): void {
     this.bucket.addToResourcePolicy(new PolicyStatement({
+      sid: 'AllowCloudFrontServicePrincipalGet',
       effect: Effect.ALLOW,
       actions: ['s3:GetObject'],
       principals: [new ServicePrincipal('cloudfront')],
@@ -43,6 +44,7 @@ export class UIResourcesConstruct extends Construct {
     }));
 
     this.bucket.addToResourcePolicy(new PolicyStatement({
+      sid: 'AllowCloudFrontServicePrincipalList',
       effect: Effect.ALLOW,
       actions: ['s3:ListBucket'],
       principals: [new ServicePrincipal('cloudfront')],

diff --git a/cdk/lib/stacks/website-stack.ts b/cdk/lib/stacks/website-stack.ts
@@ -34,7 +34,7 @@ export class WebsiteStack extends cdk.Stack {
       apiLambdaFunctionURL: api.functionURL,
     });
 
-    // uiResources.grantRead(cf.distribution);
+    uiResources.grantRead(cf.distribution);
     uiResources.deployResourcesZip(props.uiResourcesZipPath, cf.distribution);
 
     this.distribution = cf.distribution;