EHD-1518: Switch over Live service: Terraform: Create Prod environmen…

…t: Use CloudFront alias and our own HTTPS certificate
cabinetoffice · Feb 19, 2025 · 7e72f5e · 7e72f5e
1 parent 7c4faa0
commit 7e72f5e
Showing 1 changed file with 6 additions and 7 deletions.
diff --git a/terraform/cloudfront.tf b/terraform/cloudfront.tf
@@ -58,14 +58,13 @@ resource "aws_cloudfront_distribution" "distribution" {
 
   price_class = "PriceClass_100"
 
-  # aliases = ["${var.dns_record_subdomain_including_dot}${data.aws_route53_zone.route_53_zone_for_our_domain.name}"]
-  
+  aliases = ["${var.dns_record_subdomain_including_dot}${data.aws_route53_zone.route_53_zone_for_our_domain.name}"]
+
   viewer_certificate {
-    # acm_certificate_arn = aws_acm_certificate_validation.certificate_validation_waiter.certificate_arn
-    # cloudfront_default_certificate = false
-    # minimum_protocol_version = "TLSv1"
-    # ssl_support_method = "sni-only"
-    cloudfront_default_certificate = true
+    acm_certificate_arn = aws_acm_certificate_validation.certificate_validation_waiter.certificate_arn
+    cloudfront_default_certificate = false
+    minimum_protocol_version = "TLSv1"
+    ssl_support_method = "sni-only"
   }
 
   enabled = true