Merge pull request #3 from CapSoftware/feature/aws-resource-fix

fix: satisfy production AWS resource constraints

Author: richiemcilroy

infra/aws/platform/analytics.tf

@@ -116,7 +116,7 @@ resource "aws_s3_object" "clickhouse_schema" {
   bucket                 = aws_s3_bucket.clickhouse_native_backups.id
   key                    = "bootstrap/clickhouse-schema.sql"
   content                = join("\n", [for schema in sort(fileset("${path.module}/../../../clickhouse", "*.sql")) : file("${path.module}/../../../clickhouse/${schema}")])
-  etag                   = md5(join("\n", [for schema in sort(fileset("${path.module}/../../../clickhouse", "*.sql")) : file("${path.module}/../../../clickhouse/${schema}")]))
+  source_hash            = sha256(join("\n", [for schema in sort(fileset("${path.module}/../../../clickhouse", "*.sql")) : file("${path.module}/../../../clickhouse/${schema}")]))
   server_side_encryption = "aws:kms"
   kms_key_id             = aws_kms_key.clickhouse.arn
 }

infra/aws/platform/delivery.tf

@@ -174,7 +174,16 @@ resource "aws_cloudfront_response_headers_policy" "public" {
     access_control_allow_credentials = true
 
     access_control_allow_headers {
-      items = ["*"]
+      items = [
+        "Accept",
+        "Authorization",
+        "Content-Type",
+        "Idempotency-Key",
+        "If-Match",
+        "If-None-Match",
+        "Range",
+        "X-Requested-With",
+      ]
     }
 
     access_control_allow_methods {