feat: allow overriding CloudFront Distribution props in Webapp

src/webapp/__tests__/webapp.test.ts

@@ -3,6 +3,7 @@ import { App, Duration, Stack } from "aws-cdk-lib"
 import "jest-cdk-snapshot"
 import { Webapp } from "../"
 import { generateContentSecurityPolicyHeader } from "../security-headers"
+import { SecurityPolicyProtocol } from "aws-cdk-lib/aws-cloudfront"
 test("create webapp with default parameters", () => {
   const app = new App()
   const stack = new Stack(app, "Stack")
@@ -68,3 +69,14 @@ test("create webapp with domain and custom response header policy with report-on
   })
   expect(stack).toMatchCdkSnapshot()
 })
+
+test("create webapp with domain and override TLS configuration", () => {
+  const app = new App()
+  const stack = new Stack(app, "Stack")
+  new Webapp(stack, "Webapp", {
+    overrideDistributionProps: {
+      minimumProtocolVersion: SecurityPolicyProtocol.TLS_V1_2_2021,
+    },
+  })
+  expect(stack).toMatchCdkSnapshot()
+})

src/webapp/webapp.ts

@@ -87,6 +87,12 @@ export interface WebappProps {
    * any values specified in securityHeaders.behaviorOverrides.
    */
   overrideCloudFrontBehaviourOptions?: Partial<cloudfront.BehaviorOptions>
+  /**
+   * Distribution props overrides.
+   *
+   * Used to override default (AWS or Liflig) configuration
+   */
+  overrideDistributionProps?: Partial<cloudfront.DistributionProps>
 }
 
 /**
@@ -191,6 +197,7 @@ export class Webapp extends constructs.Construct {
       domainNames: props.domainNames,
       errorResponses,
       webAclId: props.webAclId,
+      ...props.overrideDistributionProps,
     })
   }