Fixed CloudFront Origin Shield region selection

Author: DarthSim

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## [0.2.1] - 2024-02-28
+### Fixed
+- Fixed CloudFront Origin Shield region selection.
+
 ## [0.2.0] - 2024-02-26
 ### Added
 - Added `HowToConfigure` output.

template.yml

@@ -163,6 +163,51 @@ Conditions:
     - !Ref 'CreateCloudFrontDistribution'
     - 'Yes'
 
+Mappings:
+  OriginShieldRegionMap:
+    # Regions with origin shield
+    us-east-2:
+      Region: us-east-2
+    us-east-1:
+      Region: us-east-1
+    us-west-2:
+      Region: us-west-2
+    ap-south-1:
+      Region: ap-south-1
+    ap-northeast-2:
+      Region: ap-northeast-2
+    ap-southeast-1:
+      Region: ap-southeast-1
+    ap-southeast-2:
+      Region: ap-southeast-2
+    ap-northeast-1:
+      Region: ap-northeast-1
+    eu-central-1:
+      Region: eu-central-1
+    eu-west-1:
+      Region: eu-west-1
+    eu-west-2:
+      Region: eu-west-2
+    sa-east-1:
+      Region: sa-east-1
+    # Regions without origin shield
+    us-west-1:
+      Region: us-west-2
+    af-south-1:
+      Region: eu-west-1
+    ap-east-1:
+      Region: ap-southeast-1
+    ca-central-1:
+      Region: us-east-1
+    eu-south-1:
+      Region: eu-central-1
+    eu-west-3:
+      Region: eu-west-2
+    eu-north-1:
+      Region: eu-west-2
+    me-south-1:
+      Region: ap-south-1
+
 Resources:
   ImgproxyFunction:
     Type: AWS::Serverless::Function
@@ -319,7 +364,10 @@ Resources:
             OriginPath: !Ref 'PathPrefix'
             OriginShield:
               Enabled: true
-              OriginShieldRegion: !Ref 'AWS::Region'
+              OriginShieldRegion: !FindInMap
+                - OriginShieldRegionMap
+                - !Ref 'AWS::Region'
+                - Region
         DefaultCacheBehavior:
           TargetOriginId: !Join
             - '-'