aws-cloudformation - Cloudformation API GW Integration响应/响应 header

Question

可以在 ResponseParameter 中使用 S3 存储桶的 !Ref。例如:

IntegrationResponses:
      - ResponseParameters:
          method.response.header.Access-Control-Allow-Headers: "'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token'"
          method.response.header.Access-Control-Allow-Methods: "'POST,OPTIONS'"
          method.response.header.Access-Control-Allow-Origin: "'https://dynamicbucketname.s3-us-west-2.amazonaws.com'"
          method.response.header.Access-Control-Allow-Credentials: "'true'"

S3Bucket:
 Type: AWS::S3::Bucket
 Properties:
   PublicAccessBlockConfiguration:
     BlockPublicAcls: true
     IgnorePublicAcls: false
     BlockPublicPolicy: true
     RestrictPublicBuckets: true  
   WebsiteConfiguration:
     IndexDocument: index.html
     ErrorDocument: error.html

所以本质上我使用的是资源 AWS::S3::Bucket，它允许模板创建存储桶。因此，该名称将是动态的。我希望能够在 Origin 中 !Ref S3Bucket。这可能吗？我知道它可以是静态的，如“'https://www.example.com'”

Answer 1

一种方法是使用 Sub 如下所示功能:

可以在 ResponseParameter 中使用 S3 存储桶的 !Ref。例如:

IntegrationResponses:
      - ResponseParameters:
          method.response.header.Access-Control-Allow-Headers: "'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token'"
          method.response.header.Access-Control-Allow-Methods: "'POST,OPTIONS'"
          method.response.header.Access-Control-Allow-Origin: !Sub "'https://${S3Bucket.DomainName}'"
          method.response.header.Access-Control-Allow-Credentials: "'true'"

列出了 DomainName 之外的其他 Bucket 返回值 here :