template.yml

Description: React Starter UI component resources

Parameters:
  EnvironmentCode:
    Type: String
    Description: Select an Environment
    AllowedValues:
      - dev
      - qa
      - prod
    Default: dev
    ConstraintDescription: Must select a valid environment

Mappings:
  EnvironmentAttributeMap:
    dev:
      CertificateArn: arn:aws:acm:us-east-1:988218269141:certificate/3d110b0f-8b3d-4ddc-bbd8-fab08ae6f038
      CloudFrontOAID: E2U9SKLVDD8TPN
      HostedZone: dev.leanstacks.net
    qa:
      CertificateArn: arn:aws:acm:us-east-1:339939222800:certificate/5cd1bce7-1323-4625-a49e-5e72d1cff7ef
      CloudFrontOAID: E322H9D7WOKWXW
      HostedZone: qa.leanstacks.net
    prod:
      CertificateArn: arn:aws:acm:us-east-1:854599584783:certificate/fc25a13b-0c9f-4c79-a20f-a13f5d2245b3
      CloudFrontOAID: EVMQ2O0M1MS7S
      HostedZone: leanstacks.net

Resources:
  ##
  # S3 Bucket for the React App
  ##
  BucketApp:
    Type: AWS::S3::Bucket
    Properties:
      BucketName: !Sub
        - 'reactstarter-ui-app.${HostedZone}-${AWS::Region}-${AWS::AccountId}'
        - HostedZone: !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, HostedZone]

  ##
  # Bucket Policy allows access from AWS CloudFront
  ##
  BucketPolicyApp:
    Type: AWS::S3::BucketPolicy
    Properties:
      Bucket: !Ref BucketApp
      PolicyDocument:
        Statement:
          - Action:
              - s3:GetObject
            Effect: Allow
            Resource: !Join
              - ''
              - - 'arn:aws:s3:::'
                - !Ref BucketApp
                - '/*'
            Principal:
              AWS: !Sub
                - 'arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ${CloudFrontOAID}'
                - CloudFrontOAID:
                    !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, CloudFrontOAID]

  ##
  # CloudFront Distribution for the React App - SPA errors and behaviors
  ##
  DistributionUi:
    Type: AWS::CloudFront::Distribution
    Properties:
      DistributionConfig:
        Comment: !Sub 'React Starter UI SPA (${EnvironmentCode})'
        CustomErrorResponses:
          - ErrorCode: 404
            ResponsePagePath: '/index.html'
            ResponseCode: 200
          - ErrorCode: 403
            ResponsePagePath: '/index.html'
            ResponseCode: 200
        DefaultCacheBehavior:
          AllowedMethods:
            - GET
            - HEAD
            - OPTIONS
          DefaultTTL: 60
          ForwardedValues:
            Cookies:
              Forward: none
            QueryString: false
          TargetOriginId: S3-APP
          ViewerProtocolPolicy: redirect-to-https
        DefaultRootObject: index.html
        Enabled: true
        HttpVersion: http2
        Origins:
          - DomainName: !GetAtt BucketApp.DomainName
            Id: S3-APP
            S3OriginConfig:
              OriginAccessIdentity: !Sub
                - 'origin-access-identity/cloudfront/${CloudFrontOAID}'
                - CloudFrontOAID:
                    !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, CloudFrontOAID]
        PriceClass: PriceClass_100

  ##
  # CloudFront Distribution for complete, full-stack APP - routing for API and UI
  ##
  DistributionApp:
    Type: AWS::CloudFront::Distribution
    Properties:
      DistributionConfig:
        Comment: !Sub 'React Starter UI App (${EnvironmentCode})'
        Aliases:
          - !Sub
            - 'react-starter.${HostedZone}'
            - HostedZone: !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, HostedZone]
        CacheBehaviors:
          - AllowedMethods:
              - DELETE
              - GET
              - HEAD
              - OPTIONS
              - PATCH
              - POST
              - PUT
            DefaultTTL: 0
            ForwardedValues:
              Cookies:
                Forward: none
              Headers:
                - Accept
                - Authorization
                - Content-Type
                - X-Requested-With
              QueryString: true
            MaxTTL: 0
            MinTTL: 0
            PathPattern: /api*
            TargetOriginId: CUSTOM-API
            ViewerProtocolPolicy: redirect-to-https
        DefaultCacheBehavior:
          AllowedMethods:
            - GET
            - HEAD
            - OPTIONS
          DefaultTTL: 60
          ForwardedValues:
            Cookies:
              Forward: none
            QueryString: false
          TargetOriginId: CUSTOM-UI
          ViewerProtocolPolicy: redirect-to-https
        DefaultRootObject: index.html
        Enabled: true
        HttpVersion: http2
        Origins:
          - CustomOriginConfig:
              HTTPPort: 80
              HTTPSPort: 443
              OriginProtocolPolicy: https-only
              OriginSSLProtocols:
                - SSLv3
                - TLSv1
                - TLSv1.1
                - TLSv1.2
            DomainName: !GetAtt DistributionUi.DomainName
            Id: CUSTOM-UI
          - CustomOriginConfig:
              HTTPPort: 80
              HTTPSPort: 443
              OriginProtocolPolicy: https-only
              OriginSSLProtocols:
                - SSLv3
                - TLSv1
                - TLSv1.1
                - TLSv1.2
            DomainName: !Sub
              - 'api.${HostedZone}'
              - HostedZone: !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, HostedZone]
            Id: CUSTOM-API
        PriceClass: PriceClass_100
        ViewerCertificate:
          AcmCertificateArn:
            !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, CertificateArn]
          SslSupportMethod: sni-only

  ##
  # Route53 DNS for the 'App' CloudFront Distribution
  ##
  RecordSetAppA:
    Type: AWS::Route53::RecordSet
    Properties:
      HostedZoneName: !Sub
        - '${HostedZone}.'
        - HostedZone: !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, HostedZone]
      Name: !Sub
        - 'react-starter.${HostedZone}'
        - HostedZone: !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, HostedZone]
      Type: A
      AliasTarget:
        HostedZoneId: Z2FDTNDATAQYW2
        DNSName: !GetAtt DistributionApp.DomainName

  ##
  # Route53 DNS for the 'App' CloudFront Distribution
  ##
  RecordSetAppAAAA:
    Type: AWS::Route53::RecordSet
    Properties:
      HostedZoneName: !Sub
        - '${HostedZone}.'
        - HostedZone: !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, HostedZone]
      Name: !Sub
        - 'react-starter.${HostedZone}'
        - HostedZone: !FindInMap [EnvironmentAttributeMap, !Ref EnvironmentCode, HostedZone]
      Type: AAAA
      AliasTarget:
        HostedZoneId: Z2FDTNDATAQYW2
        DNSName: !GetAtt DistributionApp.DomainName

Outputs:
  AppBucketName:
    Description: The application S3 bucket name
    Value: !Ref BucketApp

  DomainName:
    Description: The application domain name
    Value: !Ref RecordSetAppA