added http only to origin protocol policy

Author: briancaffey

awscdk/awscdk/cloudfront.py

@@ -72,7 +72,7 @@ def __init__(
                 cloudfront.SourceConfiguration(
                     custom_origin_source=cloudfront.CustomOriginConfig(
                         domain_name=f"{self.static_site_bucket.bucket_name}.s3-website-us-east-1.amazonaws.com",
-                        origin_protocol_policy=cloudfront.OriginProtocolPolicy.MATCH_VIEWER,
+                        origin_protocol_policy=cloudfront.OriginProtocolPolicy.HTTP_ONLY,
                     ),
                     behaviors=[
                         cloudfront.Behavior(

awscdk/stack.yml

@@ -476,14 +476,15 @@ Resources:
               HTTPPort: 80
               HTTPSPort: 443
               OriginKeepaliveTimeout: 5
-              OriginProtocolPolicy: match-viewer
+              OriginProtocolPolicy: http-only
               OriginReadTimeout: 30
               OriginSSLProtocols:
                 - TLSv1.2
             DomainName:
-              Fn::GetAtt:
-                - StaticSiteStaticSiteBucket442CE34F
-                - RegionalDomainName
+              Fn::Join:
+                - ""
+                - - Ref: StaticSiteStaticSiteBucket442CE34F
+                  - .s3-website-us-east-1.amazonaws.com
             Id: origin2
         PriceClass: PriceClass_100
         ViewerCertificate: