cloudkj/scar

Deploy static websites in seconds - with HTTPS, a global CDN, and custom domains.

scar's Issues

Update docs to reflect us-east-1 limitation due to restriction on using ACM and CloudFront

As per https://docs.aws.amazon.com/acm/latest/userguide/acm-regions.html, ACM has a restriction that requires certificates to be created in the us-east-1 region in order to be used with CloudFront:

To use an ACM Certificate with Amazon CloudFront, you must request or import the certificate in the US East (N. Virginia) region. ACM Certificates in this region that are associated with a CloudFront distribution are distributed to all the geographic locations configured for that distribution.

The docs should be updated to reflect this limitation. It's possible that CloudFormation Stack Sets can offer a path forward by requesting only the ACM certificate in us-east-1 but other resources in the chosen region, but some work is needed to see if that's possible.

See #9 (comment)

Include certificate validation using CNAME DNS record as part of template

Adding this would remove the need for the third manual step in the quick start guide - to manually validate ownership of the domain by creating the CNAME records using the AWS ACM console.

Preliminary research seems to indicate that official CloudFormation support for template-driven certificate validation may be coming, but until then some potential solutions are:

• https://binx.io/blog/2018/10/05/automated-provisioning-of-acm-certificates-using-route53-in-cloudformation/
• aws/aws-cdk#1797

Suggestion: Add estimated cost to README

I like the idea and am curious about what the monthly cost would be (or if it stays within the free tier) to run all these services.

Delete the CNAME DNS record used for certificate validation in hosted zone

Attempting to delete a newly created SCAR stack in CloudFormation currently fails due to the CNAME DNS record that is created manually as part of the validation step. A custom resource could be added to the template to remove this record from the hosted zone so that the record is deleted after validation is successful.

Add template for apex domain only

Template for a stack with no www subdomain.

Diagram Tool

What tool did you use to make this image? https://github.com/cloudkj/scar#stack

Suggestion: Replace second bucket and CloudFront distribution with Lambda function

A Lambda@Edge deployment would, I think, be a more lightweight solution for redirection than another bucket and distribution.

Something like (written for !Sub):

exports.handler = async (event, context) => {
    
    const request = event.Records[0].cf.request;
    const headers = request.headers;
    const host = headers.host[0].value.toLowerCase();

    if (host == 'www.${APEX_DOMAIN}') {
        /*
         * Generate HTTP redirect response with 302 status code and Location header.
         */
        const response = {
            status: '302',
            statusDescription: 'Found',
            headers: {
                location: [{
                    key: 'Location',
                    value: 'https://${APEX_DOMAIN}',
                }],
            },
        };
        return response;
    } else {
        return request;
    }

};

ACM Pricing

$0.50 sounds nice, but doesn't ACM charge additional $400.00 for setup (after 30 days trial)?

https://aws.amazon.com/certificate-manager/pricing/

May be good to point out in the description?

Add template for www->apex redirection

Template for a stack that is the same as the default stack, but redirects requests for the www subdomain to the apex domain.