Merge pull request #36 from fingerprintjs/rc

Release v1.0.0-rc.1

Author: necipallef

CHANGELOG.md

@@ -1,3 +1,14 @@
+## [1.0.0-rc.1](https://github.com/fingerprintjs/terraform-aws-fingerprint-cloudfront-proxy-integration/compare/v0.6.0...v1.0.0-rc.1) (2024-08-13)
+
+
+### ⚠ BREAKING CHANGES
+
+* v1.0.0
+
+### Features
+
+* v1.0.0 ([ce61945](https://github.com/fingerprintjs/terraform-aws-fingerprint-cloudfront-proxy-integration/commit/ce61945ddfc4a51fd7d8c4edf5e790dfc7117aad))
+
 ## [0.6.0](https://github.com/fingerprintjs/terraform-aws-fingerprint-cloudfront-proxy-integration/compare/v0.5.0...v0.6.0) (2024-08-13)
 
 

examples/existing-ditribution/fingerprint.tf

@@ -6,5 +6,6 @@ module "fingerprint_cloudfront_integration" {
   fpjs_shared_secret       = var.fpjs_shared_secret
 
   // You can define the proxy function's [permission boundary](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html)
-  // fpjs_proxy_lambda_role_permissions_boundary_arn = "arn:aws:iam::aws:policy/AWSLambda_FullAccess"
+  // See https://dev.fingerprint.com/docs/aws-cloudfront-integration-via-terraform#defining-a-permission-boundary-for-the-proxy-function
+  // fpjs_proxy_lambda_role_permissions_boundary_arn = "arn:aws:iam::<YOUR_ACCOUNT_ID>:policy/YOUR_POLICY_NAME"
 }

examples/standalone-distribution/fingerprint.tf

@@ -6,5 +6,6 @@ module "fingerprint_cloudfront_integration" {
   fpjs_shared_secret       = var.fpjs_shared_secret
 
   // You can define the proxy function's [permission boundary](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html)
-  // fpjs_proxy_lambda_role_permissions_boundary_arn = "arn:aws:iam::aws:policy/AWSLambda_FullAccess"
+  // See https://dev.fingerprint.com/docs/aws-cloudfront-integration-via-terraform#defining-a-permission-boundary-for-the-proxy-function
+  // fpjs_proxy_lambda_role_permissions_boundary_arn = "arn:aws:iam::<YOUR_ACCOUNT_ID>:policy/YOUR_POLICY_NAME"
 }

variables.tf

@@ -10,7 +10,7 @@ variable "fpjs_get_result_path" {
 
 variable "fpjs_agent_download_path" {
   type        = string
-  description = "request path used to send ProCDN requests (aka FPJS_AGENT_DOWNLOAD_PATH)"
+  description = "request path used to send agent download requests (aka FPJS_AGENT_DOWNLOAD_PATH)"
 
   validation {
     condition     = can(regex("^([a-zA-Z0-9\\-])+$", var.fpjs_agent_download_path))
@@ -31,6 +31,6 @@ variable "fpjs_shared_secret" {
 
 variable "fpjs_proxy_lambda_role_permissions_boundary_arn" {
   type        = string
-  description = "permissions boundary ARN for the role assumed by the Proxy lambda"
+  description = "Permissions boundary ARN for the role assumed by the Proxy lambda. Make sure your permissions boundary allows the function to access the Secrets Manager secret created for the integration (`secretsmanager:GetSecretValue`) and create logs (`logs:CreateLogStream`, `logs:CreateLogGroup`, `logs:PutLogEvents`)."
   default     = null
 }