`{"message":"Forbidden"}` when using custom domain

[ashwanthbalakrishnan5]

Unable to deploy my flask api with custom domain.

Context

I deployed my basic flask app using zappa deploy . The url I get after this command is working. When I run zappa certify I get no errors. I don't use Route 53, my domain is in GoDaddy and I already got certificate in ACM.

But this link https://d32unri5k0ytzs.cloudfront.net/ which I found in apigateway -> custom domain is giving {"message":"Forbidden"}

Your Environment

• Your zappa_settings.json:

  {
  "prod": {
      "app_function": "app.app",
      "exclude": [
          "boto3",
          "dateutil",
          "botocore",
          "s3transfer",
          "concurrent"
      ],
      "aws_region": "ap-south-1",
      "profile_name": null,
      "project_name": "api-dispatcher",
      "runtime": "python3.11",
      "s3_bucket": "api-dispatcher",
      "domain": "api-dispatcher.gameup.app",
      "certificate_arn":"arn:aws:acm:us-east-1:<ACCOUNT-ID>:certificate/<ID>",
      "route53_enabled" : false
  }
  }

[pcolmer]

@ashwanthbalakrishnan5 Have you gone into API Gateway and, under "custom domain names", added an API mapping for the stage "prod"?

[github-actions[bot]]

Hi there! Unfortunately, this Issue has not seen any activity for at least 90 days. If the Issue is still relevant to the latest version of Zappa, please comment within the next 10 days if you wish to keep it open. Otherwise, it will be automatically closed.

[rafmacalaba]

@ashwanthbalakrishnan5 Have you gone into API Gateway and, under "custom domain names", added an API mapping for the stage "prod"?

I already have this setting but it is still 403 Forbidden error. Anything to check what is the root cause?

Also, there is no Cloudfront distribution being created by the app. Is it normal?

[sridhar562345]

@ashwanthbalakrishnan5 Have you gone into API Gateway and, under "custom domain names", added an API mapping for the stage "prod"?

I already have this setting but it is still 403 Forbidden error. Anything to check what is the root cause?

Also, there is no Cloudfront distribution being created by the app. Is it normal?

If you have a custom domain, you should be able to see the AWS internal CloudFront distribution. However, these CloudFront distributions won't be visible in the CloudFront service. See the below image for reference.