Using Aws Cloudfront With Ec2transitgateway

Introduction

This Pulumi program will demonstrate how to set up AWS CloudFront with an EC2 Transit Gateway. AWS CloudFront is a content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency and high transfer speeds. An EC2 Transit Gateway connects your VPCs and on-premises networks through a central hub, simplifying your network and reducing operational costs.

Step-by-Step Explanation

Step 1: Create an EC2 Transit Gateway

1. Define the EC2 Transit Gateway resource.
2. Configure the necessary properties such as Amazon side ASN and description.

Step 2: Create a CloudFront Distribution

1. Define the CloudFront Distribution resource.
2. Configure the necessary properties such as origin settings, default cache behavior, and viewer certificate.

Step 3: Associate the Transit Gateway with VPCs

1. Define the Transit Gateway Attachment resource.
2. Attach the Transit Gateway to the desired VPCs.

Step 4: Configure Route Tables

1. Define the Route Table resources for the VPCs.
2. Add routes to the route tables to direct traffic through the Transit Gateway.

Conclusion

In this program, we created an EC2 Transit Gateway and a CloudFront distribution. We then associated the Transit Gateway with VPCs and configured the route tables to direct traffic through the Transit Gateway. This setup allows for efficient content delivery using CloudFront while managing network traffic through the Transit Gateway.

Full Code Example

import * as aws from "@pulumi/aws";
import * as awsx from "@pulumi/awsx";

// Step 1: Create an EC2 Transit Gateway
const transitGateway = new aws.ec2transitgateway.TransitGateway("transitGateway", {
    amazonSideAsn: 64512,
    description: "My EC2 Transit Gateway",
});

// Step 2: Create a CloudFront Distribution
const originId = "myS3Origin";
const s3Bucket = new aws.s3.Bucket("myBucket");
const cloudFrontDistribution = new aws.cloudfront.Distribution("myDistribution", {
    origins: [{
        domainName: s3Bucket.bucketRegionalDomainName,
        originId: originId,
    }],
    defaultCacheBehavior: {
        targetOriginId: originId,
        viewerProtocolPolicy: "redirect-to-https",
        allowedMethods: ["GET", "HEAD", "OPTIONS"],
        cachedMethods: ["GET", "HEAD"],
    },
    enabled: true,
    isIpv6Enabled: true,
    comment: "My CloudFront Distribution",
    viewerCertificate: {
        cloudfrontDefaultCertificate: true,
    },
    restrictions: {
        geoRestriction: {
            restrictionType: "none",
        },
    },
});

// Step 3: Associate the Transit Gateway with VPCs
const vpc = new awsx.ec2.Vpc("myVpc", {});
const transitGatewayAttachment = new aws.ec2transitgateway.VpcAttachment("vpcAttachment", {
    subnetIds: vpc.privateSubnetIds,
    transitGatewayId: transitGateway.id,
    vpcId: vpc.vpcId,
});

// Step 4: Configure Route Tables
const routeTable = new aws.ec2.RouteTable("routeTable", {
    vpcId: vpc.vpcId,
});
const route = new aws.ec2.Route("route", {
    routeTableId: routeTable.id,
    destinationCidrBlock: "0.0.0.0/0",
    transitGatewayId: transitGateway.id,
});

export const cloudFrontDomainName = cloudFrontDistribution.domainName;