cloudposse/terraform-aws-cloudfront-cdn v2.0.0

on GitHub

The comment corresponds to the description on the AWS console UI! Updating the text here so it's more easily aware.

Adds VPC origin support - lets CloudFront point at a private ALB/NLB/EC2 instance instead of needing a public endpoint.

• origin_type can now be "vpc", with a new vpc_origin_config var for the primary origin
• same vpc_origin_config shape works per-entry on custom_origins too
• added examples/vpc-origin showing the whole thing end to end (internal ALB + aws_cloudfront_vpc_origin + the module)
• bumped the aws provider floor to >= 6.28.0 - that's the version owner_account_id actually shipped in, and without it the module errors out as soon as you touch vpc_origin_config
• also fixed a few examples/* that were still pinned to old provider constraints (>= 5.0) that didn't match what the root module actually needs
• README regenerated

why

There's currently no way to use VPC origins with this module short of forking it.

Kept the aws_cloudfront_vpc_origin resource itself outside the module (you pass in the ID) - same pattern as the mTLS trust store and connection function. It's infra that usually lives elsewhere and has its own lifecycle, so it didn't feel right to own it here.

Nothing breaks - new stuff defaults to null.

references

• closes #158
• hashicorp/terraform-provider-aws#40234
• https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfront_distribution#vpc-origin-config-arguments