sashee commented 2 years ago

Terraform Core Version

1.1.8

AWS Provider Version

4.31.0

Affected Resource(s)

aws_cloudfront_distribution
aws_cloudfront_origin_access_control

Expected Behavior

When the origin_access_control_origin_type does not match the origin type, Terraform should report an error.

Actual Behavior

terraform apply says Still creating... but the Console shows no Distribution is being deployed.

error_ss

Relevant Error/Panic Output Snippet

No response

Terraform Configuration Files

resource "aws_cloudfront_origin_access_control" "oac" {
  name                              = "example_oac"
  description                       = ""
  origin_access_control_origin_type = "s3"
  signing_behavior                  = "always"
  signing_protocol                  = "sigv4"
}

resource "aws_cloudfront_distribution" "distribution" {
  origin {
    domain_name              = "example.com"
    origin_id                = "example"
    origin_access_control_id = aws_cloudfront_origin_access_control.oac.id
                custom_origin_config {
                        http_port              = 80
                        https_port             = 443
                        origin_protocol_policy = "https-only"
                        origin_ssl_protocols   = ["TLSv1.2"]
                }
  }

  enabled = true

  default_cache_behavior {
    allowed_methods  = ["GET", "HEAD"]
    cached_methods   = ["GET", "HEAD"]
    target_origin_id = "example"

    default_ttl = 0
    min_ttl     = 0
    max_ttl     = 0

    forwarded_values {
      query_string = false
      cookies {
        forward = "none"
      }
    }
    viewer_protocol_policy = "redirect-to-https"
    compress               = true
  }

  restrictions {
    geo_restriction {
      restriction_type = "none"
    }
  }

  viewer_certificate {
    cloudfront_default_certificate = true
  }
  http_version    = "http2and3"
  price_class     = "PriceClass_100"
  is_ipv6_enabled = true
}

Steps to Reproduce

terraform init
terraform apply

Debug Output

debug.log

Panic Output

No response

Important Factoids

No response

References

No response

Would you like to implement a fix?

No response

github-actions[bot] commented 2 years ago

Community Note

Voting for Prioritization

Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
Please see our prioritization guide for information on how we prioritize.
Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

If you are interested in working on this issue, please leave a comment.
If this would be your first contribution, please review the contribution guide.

irfan-ssh commented 1 year ago

Thanks dear i am finding the solution from last week, finally today you solve my problem

irfan-ssh commented 1 year ago

how can i make a public and private key for cloud front to restrict viewer policy

madpipeline commented 1 year ago

I just ran into this issue... somewhat. I have the configuration you give in your example. I'm greeted with this error upon terraform apply:

Error: updating CloudFront Distribution (XXXXXXX): IllegalOriginAccessConfiguration: Illegal configuration: The origin type and OAC origin type differ.

I think this bug is fixed.