{"id":18337194,"url":"https://github.com/team-supercharge/webapp-for-aws","last_synced_at":"2025-04-06T04:36:13.216Z","repository":{"id":29456954,"uuid":"121741610","full_name":"team-supercharge/webapp-for-aws","owner":"team-supercharge","description":"CloudFormation template to deploy web apps on AWS","archived":false,"fork":false,"pushed_at":"2024-01-05T10:20:18.000Z","size":105,"stargazers_count":4,"open_issues_count":1,"forks_count":2,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-03-21T17:37:08.508Z","etag":null,"topics":["aws","cloudformation","cloudfront","iam","lambda","s3"],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/team-supercharge.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-02-16T11:04:18.000Z","updated_at":"2022-01-17T13:50:30.000Z","dependencies_parsed_at":"2024-11-05T20:12:57.425Z","dependency_job_id":null,"html_url":"https://github.com/team-supercharge/webapp-for-aws","commit_stats":null,"previous_names":[],"tags_count":7,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/team-supercharge%2Fwebapp-for-aws","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/team-supercharge%2Fwebapp-for-aws/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/team-supercharge%2Fwebapp-for-aws/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/team-supercharge%2Fwebapp-for-aws/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/team-supercharge","download_url":"https://codeload.github.com/team-supercharge/webapp-for-aws/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247435038,"owners_count":20938530,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","cloudformation","cloudfront","iam","lambda","s3"],"created_at":"2024-11-05T20:10:25.180Z","updated_at":"2025-04-06T04:36:08.201Z","avatar_url":"https://github.com/team-supercharge.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# WebApp for AWS\n\n**WebApp for AWS** is a CloudFormation template to help setting up the infrastructure needed for a typical Single Page Application (SPA) based on AWS services.\n\n![layout](./layout.png)\n\nThe following AWS services are used:\n* [IAM](https://aws.amazon.com/iam/)\n* [S3](https://aws.amazon.com/s3/)\n* [CloudFront](https://aws.amazon.com/cloudfront/)\n* [Lambda](https://aws.amazon.com/lambda/)\n\n## Getting started\n\nTo quickly create a stack with the latest version click on the button below.\n\n[\u003cimg src=\"https://s3.amazonaws.com/cloudformation-examples/cloudformation-launch-stack.png\"\u003e](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/new?templateURL=https://s3.amazonaws.com/supercharge-templates/webapp/latest/webapp.template)\n\n---\n\n# Contents\n\n* [Parameters](#parameters)\n  * [CloudFront Settings](#cloudfront-settings)\n  * [Access Control \u0026 Authentication](#access-control--authentication)\n* [Outputs](#outputs)\n* [Authors](#authors)\n* [License](#license)\n\n# Parameters\n\n## CloudFront Settings\n\nYou can specify the crucial parameters for the generated CloudFront distribution with the options below. Other settings have smart defaults: e.g. caching, error page handling, etc.\n\n| Name                   | Description                             |\n| ---------------------- | --------------------------------------- |\n| `PriceClass`           | Price class (replication regions)       |\n| `ViewerProtocolPolicy` | HTTP / HTTPS and redirect configuration |\n| `CNAMEs`               | List of custom domain names             |\n| `SSLCertificateARN`    | ACM certificate identifier for TLS      |\n\n## Access Control \u0026 Authentication\n\nWith **WebApp for AWS** you can easily set up access control and authentication using a [Lambda@Edge](https://docs.aws.amazon.com/lambda/latest/dg/lambda-edge.html) function under the hood.\n\n| Name              | Description                                    |\n| ----------------- | ---------------------------------------------- |\n| `VersionId`       | Versioning parameter (see note below)          |\n| `AccessWhitelist` | IP ranges to enable access for                 |\n| `AuthEnabled`     | HTTP Basic authentication enabled or not       |\n| `AuthCredentials` | List of `\u003cusername\u003e:\u003cpassword\u003e` pairs          |\n| `AuthWhitelist`   | IP ranges that does not require authentication |\n\n\u003e **IMPORTANT:** Due to technical limitations in CloudFormation and [Lambda Function Versioning](https://docs.aws.amazon.com/lambda/latest/dg/versioning-aliases.html) you need to increment the `VersionId` counter during a stack update every time you change any of the parameters below!\n\n### Access Control\n\nWith the `AccessWhitelist` parameter you can specify a comma separated list of CIDRs to allow accessing your app. Any client that is not on the whitelist will receive a `403 Forbidden` error.\n\n*Examples:*\n\n* If you want your app to be publicly accessible keep the default `0.0.0.0/0`\n* If you want to restrict access to one specific IP address use `\u003cIP address\u003e/32`\n\n### Authentication\n\nYou can also enable additional HTTP Basic authentication for your app on the top of [Access Control](#access-control). Use the `AuthEnabled` parameter with `yes` or `no` values to enable or disable HTTP Basic authentication. Unauthenticated users will receive a `401 Unauthorized` error.\n\nIn the `AuthCredentials` parameter you can define a comma separated list of `\u003cusername\u003e:\u003cpassword\u003e` pairs, and `AuthWhitelist` is a comma separated list of CIDRs which does not require password authentication.\n\n*Examples:*\n\n* If you want a **public app** with password protection use:\n\n\u003e | Parameter         | Value                      |\n\u003e | ----------------- | -------------------------- |\n\u003e | `AccessWhitelist` | `0.0.0.0/0`                |\n\u003e | `AuthEnabled`     | `yes`                      |\n\u003e | `AuthCredentials` | `user1:pass1, user2:pass2` |\n\n* If you want a **public app** but passwordless access for e.g. your internal IP range use:\n\n\u003e | Parameter         | Value                      |\n\u003e | ----------------- | -------------------------- |\n\u003e | `AccessWhitelist` | `0.0.0.0/0`                |\n\u003e | `AuthEnabled`     | `yes`                      |\n\u003e | `AuthCredentials` | `user1:pass1, user2:pass2` |\n\u003e | `AuthWhitelist`   | `\u003cyour IP range\u003e`          |\n\n* If you want a **private app** (not available for the public) and don't need additional password protection:\n\n\u003e | Parameter         | Value             |\n\u003e | ----------------- | ----------------- |\n\u003e | `AccessWhitelist` | `\u003cyour IP range\u003e` |\n\u003e | `AuthEnabled`     | `no`              |\n\n# Outputs\n\n| Name                 | Description                                     |\n| -------------------- | ----------------------------------------------- |\n| `AccessKeyId`        | IAM access key of bucket owner                  |\n| `AccessKeySecret`    | IAM key secret of bucket owner                  |\n| `BucketName`         | Name of S3 bucket                               |\n| `DistributionId`     | ID of the CloudFront distribution               |\n| `DistributionDomain` | Domain name for the CloudFront the distribution |\n\n# Authors\n\n[redcancode](https://github.com/redcancode) \u0026 [exoszajzbuk](https://github.com/exoszajzbuk) @ [![Supercharge](https://supercharge.io/assets/logo-small-with-text.png)](https://supercharge.io/)\n\n# License\n\n[MIT](LICENSE.md)\n\n```\nCopyright (c) 2018 Supercharge\n\nMIT License\n\nPermission is hereby granted, free of charge, to any person obtaining\na copy of this software and associated documentation files (the\n\"Software\"), to deal in the Software without restriction, including\nwithout limitation the rights to use, copy, modify, merge, publish,\ndistribute, sublicense, and/or sell copies of the Software, and to\npermit persons to whom the Software is furnished to do so, subject to\nthe following conditions:\n\nThe above copyright notice and this permission notice shall be\nincluded in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND,\nEXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF\nMERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND\nNONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE\nLIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\nOF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION\nWITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fteam-supercharge%2Fwebapp-for-aws","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fteam-supercharge%2Fwebapp-for-aws","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fteam-supercharge%2Fwebapp-for-aws/lists"}