Skip to content

fix(cognito): output CloudFront domain name instead of ARN#40

Open
dmeiser wants to merge 1 commit into
mainfrom
fix/cognito-cloudfront-domain-output
Open

fix(cognito): output CloudFront domain name instead of ARN#40
dmeiser wants to merge 1 commit into
mainfrom
fix/cognito-cloudfront-domain-output

Conversation

@dmeiser

@dmeiser dmeiser commented Jun 19, 2026

Copy link
Copy Markdown
Owner

Fixes the login. Route53 alias target by returning the CloudFront distribution domain name instead of its ARN from the cognito module output.

The cloudfront_domain output was returning the CloudFront distribution ARN,
which is invalid when used as a Route53 alias target. Return the actual
domain name from cloudfront_distribution.

tofu validate passes (pre-existing hash_key deprecation warnings remain).
Copilot AI review requested due to automatic review settings June 19, 2026 19:29

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR fixes Cognito custom-domain DNS aliasing by changing the cognito OpenTofu module output to return the CloudFront distribution domain name (required by Route53 alias targets) rather than the CloudFront distribution ARN, which was breaking login.

Changes:

  • Update the cloudfront_domain module output to use aws_cognito_user_pool_domain.custom.cloudfront_distribution (domain name) instead of cloudfront_distribution_arn.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants