require signed cookies

theBoEffect · Jun 30, 2017 · e978cf8 · e978cf8
1 parent ba6b5b6
commit e978cf8
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/app.yml b/app.yml
@@ -54,7 +54,7 @@ Resources:
       Role: !GetAtt LambdaRole.Arn
       Environment:
         Variables:
-          WEBSITE_DOMAIN: !Ref websiteDomain
+          WEBSITE_DOMAIN: !Ref website
           SESSION_DURATION: !Ref sessionDuration
           REDIRECT_ON_SUCCESS: !Ref redirectOnSuccess
           CLOUDFRONT_KEYPAIR_ID: !Ref cloudFrontKeypairId
@@ -373,13 +373,17 @@ Resources:
           - TargetOriginId: !Sub
               - S3-${websiteDomain}-resized
               - websiteDomain: !Ref websiteDomain
+            TrustedSigners:
+              - self
             ViewerProtocolPolicy: https-only
             PathPattern: 'pics/resized/*'
             ForwardedValues:
               QueryString: 'false'
           - TargetOriginId: !Sub
               - S3-${websiteDomain}-original
               - websiteDomain: !Ref websiteDomain
+            TrustedSigners:
+              - self
             ViewerProtocolPolicy: https-only
             PathPattern: 'pics/original/*'
             ForwardedValues:
@@ -417,6 +421,8 @@ Resources:
           TargetOriginId: !Sub
             - S3-${websiteDomain}
             - websiteDomain: !Ref websiteDomain
+          TrustedSigners:
+            - self
           ForwardedValues:
             QueryString: 'false'
           ViewerProtocolPolicy: redirect-to-https