lambdaedge-cf.yml

Parameters:
  S3BucketName:
    Type: String
Resources:
  WebBucket:
    Type: "AWS::S3::Bucket"
    Properties:
      BucketName:
        Ref: S3BucketName
      AccessControl: PublicRead
      WebsiteConfiguration:
        ErrorDocument: index.html
        IndexDocument: index.html
  WebBucketPolicy:
    Type: "AWS::S3::BucketPolicy"
    Properties:
      Bucket:
        Ref: S3BucketName
      PolicyDocument:
        Statement:
          - Action:
              - "s3:GetObject"
            Effect: "Allow"
            Principal: "*"
            Resource:
              Fn::Join:
                - ""
                - - "arn:aws:s3:::"
                  - Ref: S3BucketName
                  - "/*"
  LambdaEdgeExecutionRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service:
                - lambda.amazonaws.com
                - edgelambda.amazonaws.com
            Action:
              - sts:AssumeRole
      Policies:
        - PolicyName: logging
          PolicyDocument:
            Version: 2012-10-17
            Statement:
              - Resource: "*"
                Effect: Deny
                Action:
                  - "logs:CreateLogGroup"
                  - "logs:CreateLogStream"
                  - "logs:PutLogEvents"
  SetCustomHeaders:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: "index.handler"
      Role:
        Fn::GetAtt:
          - "LambdaEdgeExecutionRole"
          - "Arn"
      Code:
        ZipFile: !Sub |
          'use strict';
          /* change the version number below whenever this code is modified */
          exports.handler = (event, context, callback) => {
              const request = event.Records[0].cf.request;
              const headers = request.headers;
              const user_agent = headers['user-agent'];
              const host = headers['host'];
              if (user_agent && host) {
                var prerender = /googlebot|Mediapartners-Google|AdsBot-Google-Mobile|AdsBot-Google-Mobile|AdsBot-Google|Googlebot-Image|Googlebot-News|FeedFetcher-Google|Google-Read-Aloud|Google-Structured-Data-Testing-Tool|Google Page Speed Insights|Chrome-Lighthouse|bingbot|yandex|baiduspider|Facebot|facebookexternalhit|twitterbot|rogerbot|linkedinbot|embedly|quora link preview|showyoubot|outbrain|pinterest|slackbot|vkShare|W3C_Validator/i.test(user_agent[0].value);
                prerender = prerender || /_escaped_fragment_/.test(request.querystring);
                prerender = prerender && ! /\.(js|css|xml|less|png|jpg|jpeg|json|gif|pdf|doc|txt|ico|rss|zip|mp3|rar|exe|wmv|doc|avi|ppt|mpg|mpeg|tif|wav|mov|psd|ai|xls|mp4|m4a|swf|dat|dmg|iso|flv|m4v|torrent|ttf|woff|svg|eot)$/i.test(request.uri);
                if (prerender) {
                  headers['x-prerender-host'] = [{ key: 'X-Prerender-Host', value: host[0].value}];
                  headers['x-prerender-cachebuster'] = [{ key: 'X-Prerender-Cachebuster', value: Date.now().toString()}];
                }
              }
              callback(null, request);
          };
      Runtime: "nodejs18.x"
  SetCustomHeadersVersion6:
    Type: "AWS::Lambda::Version"
    Properties:
      FunctionName:
        Ref: "SetCustomHeaders"
      Description: "SetCustomHeaders"
  RedirectToPrerender:
    Type: "AWS::Lambda::Function"
    Properties:
      Handler: "index.handler"
      Role:
        Fn::GetAtt:
          - "LambdaEdgeExecutionRole"
          - "Arn"
      Code:
        ZipFile: |
          'use strict';
          /* change the version number below whenever this code is modified */
          exports.handler = (event, context, callback) => {
               const request = event.Records[0].cf.request;
               if (request.headers['x-prerender-host']) {
                 request.origin = {
                     custom: {
                         domainName: 'prerender.naadanchords.com',
                         port: 443,
                         protocol: 'https',
                         readTimeout: 20,
                         keepaliveTimeout: 5,
                         customHeaders: {},
                         sslProtocols: ['TLSv1', 'TLSv1.1'],
                         path: '/prerender?url=https%3A%2F%2F' + request.headers['x-prerender-host'][0].value
                     }
                 };
                 request.headers['host'] = [{ key: 'host', value: 'prerender.naadanchords.com'}];
              }
              callback(null, request);
          };
      Runtime: "nodejs18.x"
  RedirectToPrerenderVersion4:
    Type: "AWS::Lambda::Version"
    Properties:
      FunctionName:
        Ref: "RedirectToPrerender"
      Description: "RedirectToPrerender"
  CloudFront:
    Type: "AWS::CloudFront::Distribution"
    Properties:
      DistributionConfig:
        DefaultCacheBehavior:
          Compress: true
          # NOTE: we let cloudfront cache heavily the resurces of the SPA. Your deploy
          #       step will need to include an invalidation of the cloudfromt cache.
          #       The requests to prerender.naadanchords.com are NOT cached thanks to the X-Prerender-Cachebuster
          #       header.
          MinTTL: 31536000
          DefaultTTL: 31536000
          ForwardedValues:
            QueryString: true
            Headers:
              - "X-Prerender-Host"
              - "X-Prerender-Cachebuster"
          TargetOriginId: origin
          ViewerProtocolPolicy: redirect-to-https
          LambdaFunctionAssociations:
            - EventType: viewer-request
              LambdaFunctionARN:
                !Join [
                  ":",
                  [
                    !GetAtt [SetCustomHeaders, Arn],
                    !GetAtt [SetCustomHeadersVersion6, Version],
                  ],
                ]
            - EventType: origin-request
              LambdaFunctionARN:
                !Join [
                  ":",
                  [
                    !GetAtt [RedirectToPrerender, Arn],
                    !GetAtt [RedirectToPrerenderVersion4, Version],
                  ],
                ]
        Enabled: true
        CustomErrorResponses:
          - ErrorCode: 404
            ResponseCode: 200
            ResponsePagePath: /index.html
          - ErrorCode: 501
            ResponseCode: 404
            ResponsePagePath: /index.html
        Aliases:
          - "www.naadanchords.com"
        ViewerCertificate:
          AcmCertificateArn: "arn:aws:acm:us-east-1:608318364761:certificate/2460dc04-8a28-4e30-aa3c-d9e0b63a52e0"
          MinimumProtocolVersion: "TLSv1.1_2016"
          SslSupportMethod: "sni-only"
        HttpVersion: http2
        Origins:
          - CustomOriginConfig:
              OriginProtocolPolicy: http-only
            DomainName:
              !Select [2, !Split ["/", !GetAtt [WebBucket, WebsiteURL]]]
            Id: origin
        PriceClass: PriceClass_All