Add CORS rule to the Pretix s3 media bucket (#4422)

Author: marcoacierno

infrastructure/applications/database/db.tf

@@ -9,7 +9,7 @@ resource "aws_db_instance" "database" {
   engine                      = "postgres"
   identifier                  = "pythonit-${terraform.workspace}"
   allow_major_version_upgrade = true
-  engine_version              = "14.13"
+  engine_version              = "14.17"
   instance_class              = "db.t4g.micro"
   db_name                     = local.is_prod ? "${local.normalized_workspace}backend" : "pycon"
   username                    = "root"

infrastructure/applications/pretix/s3.tf

@@ -13,3 +13,14 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "media" {
     }
   }
 }
+
+resource "aws_s3_bucket_cors_configuration" "cors" {
+  bucket = aws_s3_bucket.media.id
+
+  cors_rule {
+    allowed_methods = ["GET"]
+    allowed_origins = [
+      "https://${local.alias}"
+    ]
+  }
+}