DT-187 variable for origin read timeout

Author: Jonathan Bloxsom

terraform/modules/cloudfront_distributions/main.tf

@@ -60,6 +60,7 @@ module "delta_cloudfront" {
   is_ipv6_enabled                = var.delta.ip_allowlist == null
   geo_restriction_countries      = var.delta.geo_restriction_countries
   apply_aws_shield               = var.apply_aws_shield
+  origin_read_timeout            = var.delta.origin_read_timeout
 }
 
 module "api_cloudfront" {

terraform/modules/cloudfront_distributions/variables.tf

@@ -41,6 +41,7 @@ variable "delta" {
     # Leave null to disable restrictions
     geo_restriction_countries = optional(list(string))
     ip_allowlist              = optional(list(string))
+    origin_read_timeout       = optional(number)
   })
 }
 

terraform/modules/website_cloudfront/main.tf

@@ -47,7 +47,7 @@ resource "aws_cloudfront_distribution" "main" {
       https_port             = 443
       origin_protocol_policy = var.cloudfront_domain == null ? "http-only" : "https-only"
       origin_ssl_protocols   = ["TLSv1.2"]
-      origin_read_timeout    = 60
+      origin_read_timeout    = var.origin_read_timeout
     }
 
     custom_header {

terraform/modules/website_cloudfront/variables.tf

@@ -45,3 +45,9 @@ variable "geo_restriction_countries" {
 variable "apply_aws_shield" {
   type = bool
 }
+
+variable "origin_read_timeout" {
+  type        = number
+  description = "Read timeout for the website origin"
+  default     = 60
+}

terraform/production/main.tf

@@ -232,6 +232,7 @@ module "cloudfront_distributions" {
     }
     ip_allowlist              = local.cloudfront_ip_allowlists.delta_website
     geo_restriction_countries = ["GB", "IE"]
+    origin_read_timeout       = 180
   }
   api = {
     alb = module.public_albs.delta_api