Merge pull request #4 from TechHoldingLLC/cloudfront-cache

Cloudfront cache add ttl variables

Author: meetsheth11

EXAMPLE.md

@@ -64,4 +64,34 @@ module "cloudfront" {
       }
     ]
 }
+```
+
+## Cloudfront distribution with s3 Origin with TTL value
+```
+module "cloudfront" {
+  source = "./cloudfront"
+  origin = {
+    domain_name = "s3_bucket_regional_domain_name"
+    origin_id   = "s3_bucket_name"
+
+    ## We can only use Any one of Origin Access Control or Origin Access Identity
+    # For Origin Access Control
+    origin_access_control_id = "s3_cloudfront_origin_access_control_id"
+    # For Origin Access Identity
+    s3_origin_config = {
+      s3_origin_access_identity = "s3_cloudfront_origin_access_identity_path"
+    }
+
+  }
+  domain_aliases = ["example.com", "www.example.com"]
+  acm_arn        = "acm_arn"
+
+  ## TTL(Time to Live) is the time in seconds that an object is in Cloudfront Cache.
+  # If we pass these below values then it will be overwritten by default values.
+  ttl_values = {
+    min_ttl = 1         # min amount of time that you want objects to stay in cloudfront cache before it sends another request to origin
+    max_ttl = 86900     # max amount of time that you want objects to stay in cloudfront cache before it sends another request to origin
+    default_ttl = 3500  # default amount of time that you want objects to stay in cloudfront cache before it sends another request to origin
+  }
+}
 ```

README.md

@@ -25,7 +25,7 @@ No modules.
 
 | Name | Description | Type | Default | Required |
 |------|-------------|------|---------|:--------:|
-| <a name="input_acm_arn"></a> [acm\_arn](#input\_acm\_arn) | ACM cert arn | `string` | n/a | yes |
+| <a name="input_acm_arn"></a> [acm\_arn](#input\_acm\_arn) | ACM cert arn | `string` | n/a | no |
 | <a name="input_allowed_methods"></a> [allowed\_methods](#input\_allowed\_methods) | Allowed methods | `list(any)` | <pre>[<br>  "GET",<br>  "HEAD"<br>]</pre> | no |
 | <a name="input_cache_policy_id"></a> [cache\_policy\_id](#input\_cache\_policy\_id) | AWS managed cache policy id | `string` | `""` | no |
 | <a name="input_cached_methods"></a> [cached\_methods](#input\_cached\_methods) | Cached methods | `list(any)` | <pre>[<br>  "GET",<br>  "HEAD"<br>]</pre> | no |
@@ -42,6 +42,7 @@ No modules.
 | <a name="input_origin"></a> [origin](#input\_origin) | Origin configuration | `any` | n/a | yes |
 | <a name="input_route53_zone_id"></a> [route53\_zone\_id](#input\_route53\_zone\_id) | Route53 zone id | `string` | `""` | no |
 | <a name="input_web_acl_id"></a> [web\_acl\_id](#input\_web\_acl\_id) | WAF web ACL id | `string` | `""` | no |
+| <a name="input_ttl_values"></a> [ttl\_values](#input\_ttl\_values) | ttl values | `map` | {} | no |
 
 ## Outputs
 

cloudfront.tf

@@ -60,6 +60,9 @@ resource "aws_cloudfront_distribution" "cloudfront" {
 
     viewer_protocol_policy = "redirect-to-https"
     compress               = true
+    min_ttl                = lookup(var.ttl_values,"min_ttl",0)
+    max_ttl                = lookup(var.ttl_values,"max_ttl",86400)
+    default_ttl            = lookup(var.ttl_values,"default_ttl",3600)
 
     dynamic "forwarded_values" {
       for_each = var.cache_policy_id != "" ? [] : [1]

variables.tf

@@ -96,4 +96,10 @@ variable "ipv6" {
   description = "ipv6 status"
   type        = bool
   default     = false
+}
+
+variable "ttl_values" {
+  description = "map of ttl variables"
+  type        = map(any)
+  default     = {}
 }