ci: add storybook infrastructure

infra/terraform/acm/terraform.tf

@@ -1,9 +1,9 @@
 terraform {
-  required_version = "~> 1.3.7"
+  required_version = "~>1.7.3"
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.54.0"
+      version = "5.62.0"
     }
   }
   backend "s3" {}

infra/terraform/cf/terraform.tf

@@ -1,9 +1,9 @@
 terraform {
-  required_version = "~> 1.3.7"
+  required_version = "~>1.7.3"
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.54.0"
+      version = "5.62.0"
     }
   }
   backend "s3" {}

infra/terraform/s3/s3.tf

@@ -2,9 +2,17 @@ resource "aws_s3_bucket" "bucket" {
   bucket = var.s3_bucket_name
 }
 
-resource "aws_s3_bucket_acl" "bucket_acl" {
+resource "aws_s3_bucket_ownership_controls" "bucket_controls" {
   bucket = aws_s3_bucket.bucket.id
-  acl    = var.s3_bucket_acl
+  rule {
+    object_ownership = "BucketOwnerPreferred"
+  }
+}
+
+resource "aws_s3_bucket_acl" "bucket_acl" {
+  depends_on = [aws_s3_bucket_ownership_controls.bucket_controls]
+  bucket     = aws_s3_bucket.bucket.id
+  acl        = var.s3_bucket_acl
 }
 
 resource "aws_s3_bucket_versioning" "bucket_versioning" {

infra/terraform/s3/terraform.tf

@@ -1,9 +1,9 @@
 terraform {
-  required_version = "~> 1.3.7"
+  required_version = "~>1.7.3"
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.54.0"
+      version = "5.62.0"
     }
   }
   backend "s3" {}

infra/terragrunt/prod/eu-west-1/ds-blocks-acm/terragrunt.hcl

@@ -0,0 +1,14 @@
+terraform {
+    source = "${get_parent_terragrunt_dir()}/../terraform/acm"
+}
+
+include {
+  path = find_in_parent_folders()
+}
+
+inputs = {
+  acm_domain_name               = "storybook-react.design-system.blocks.gov.ie"
+  acm_subject_alternative_names = [
+    "storybook-html.design-system.blocks.gov.ie"
+  ]
+}

infra/terragrunt/prod/eu-west-1/global-html-storybook-cf/terragrunt.hcl

@@ -0,0 +1,32 @@
+terraform {
+    source = "${get_parent_terragrunt_dir()}/../terraform/cf"
+}
+
+include {
+  path = find_in_parent_folders()
+}
+
+inputs = {
+  s3_bucket_arn = "arn:aws:s3:::storybook-html-design-system-blocks-gov-ie"
+  s3_bucket_id  = "storybook-html-design-system-blocks-gov-ie"
+
+  acm_cert_domain_name = "storybook-html.design-system.blocks.gov.ie"
+
+  cf_aliases = []
+
+  cf_viewer_certificate_arn                = "arn:aws:acm:us-east-1:782102975611:certificate/e97877f7-2bf7-493c-b349-25dca165c2a5"
+  cf_viewer_certificate_ssl_support_method = "sni-only"
+
+  cf_policy_document_statement_effect  = "Allow"
+  cf_policy_document_statement_actions = ["s3:GetObject"]
+  cf_policy_document_principals_type   = "AWS"
+
+  cf_comment     = "Terraform CF for S3 Static Website"
+  cf_price_class = "PriceClass_100"
+
+  cf_cache_viewer_protocol_policy = "redirect-to-https"
+  cf_cache_allowed_methods        = ["GET", "HEAD"]
+  cf_cache_cached_methods         = ["GET", "HEAD"]
+  cf_cache_policy_id              = "658327ea-f89d-4fab-a63d-7e88639e58f6"
+  cf_cache_compress               = true
+}

infra/terragrunt/prod/eu-west-1/global-html-storybook/terragrunt.hcl

@@ -0,0 +1,12 @@
+terraform {
+    source = "${get_parent_terragrunt_dir()}/../terraform/s3"
+}
+
+include {
+  path = find_in_parent_folders()
+}
+
+inputs = {
+  s3_bucket_name = "storybook-html-design-system-blocks-gov-ie"
+  s3_bucket_acl  = "private"
+}

infra/terragrunt/prod/eu-west-1/react-storybook-cf/terragrunt.hcl

@@ -0,0 +1,32 @@
+terraform {
+    source = "${get_parent_terragrunt_dir()}/../terraform/cf"
+}
+
+include {
+  path = find_in_parent_folders()
+}
+
+inputs = {
+  s3_bucket_arn = "arn:aws:s3:::storybook-react-design-system-blocks-gov-ie"
+  s3_bucket_id  = "storybook-react-design-system-blocks-gov-ie"
+
+  acm_cert_domain_name = "storybook-react.design-system.blocks.gov.ie"
+
+  cf_aliases = []
+
+  cf_viewer_certificate_arn                = "arn:aws:acm:us-east-1:782102975611:certificate/e97877f7-2bf7-493c-b349-25dca165c2a5"
+  cf_viewer_certificate_ssl_support_method = "sni-only"
+
+  cf_policy_document_statement_effect  = "Allow"
+  cf_policy_document_statement_actions = ["s3:GetObject"]
+  cf_policy_document_principals_type   = "AWS"
+
+  cf_comment     = "Terraform CF for S3 Static Website"
+  cf_price_class = "PriceClass_100"
+
+  cf_cache_viewer_protocol_policy = "redirect-to-https"
+  cf_cache_allowed_methods        = ["GET", "HEAD"]
+  cf_cache_cached_methods         = ["GET", "HEAD"]
+  cf_cache_policy_id              = "658327ea-f89d-4fab-a63d-7e88639e58f6"
+  cf_cache_compress               = true
+}

infra/terragrunt/prod/eu-west-1/react-storybook/terragrunt.hcl

@@ -0,0 +1,12 @@
+terraform {
+    source = "${get_parent_terragrunt_dir()}/../terraform/s3"
+}
+
+include {
+  path = find_in_parent_folders()
+}
+
+inputs = {
+  s3_bucket_name = "storybook-react-design-system-blocks-gov-ie"
+  s3_bucket_acl  = "private"
+}