feat: Configure CORS on CF

.github/workflows/infra-deploy.yml

@@ -9,6 +9,10 @@ permissions:
   contents: read
   id-token: write
 
+concurrency:
+  group: infra-deploy
+  cancel-in-progress: true
+
 jobs:
   deploy:
     environment:

terraform/modules/kitten-science-website/cloudfront.tf

@@ -87,4 +87,36 @@ resource "aws_cloudfront_distribution" "this" {
   }
 
   provider = aws.global
-}
+}
+
+resource "cloudfront_response_headers_policy" "this" {
+  name = var.domain_name
+
+  cors_config {
+    access_control_allow_credentials = false
+
+    access_control_allow_headers {
+      items = [
+        "Accept",
+        "Accept-Language",
+        "Content-Language",
+        "Content-Type",
+        "Range"
+      ]
+    }
+
+    access_control_allow_methods {
+      items = ["GET", "HEAD"]
+    }
+
+    access_control_allow_origins {
+      items = [
+        "https://kittensgame.com",
+        "http://127.0.0.1:8100",
+        "http://localhost:8100"
+      ]
+    }
+
+    origin_override = true
+  }
+}

terraform/modules/kitten-science-website/s3.tf

@@ -22,7 +22,7 @@ resource "aws_s3_bucket_public_access_block" "this" {
 data "aws_iam_policy_document" "s3_public_read" {
   statement {
     principals {
-      type = "AWS"
+      type        = "AWS"
       identifiers = ["*"]
     }