Allow only single CORS origin (string)

Author: mewa

main.tf

@@ -45,6 +45,6 @@ resource "aws_api_gateway_integration_response" "cors_integration_response" {
   response_parameters = {
     "method.response.header.Access-Control-Allow-Headers" = "'${local.headers}'",
     "method.response.header.Access-Control-Allow-Methods" = "'${local.methods}'",
-    "method.response.header.Access-Control-Allow-Origin" = "'${local.origins}'"
+    "method.response.header.Access-Control-Allow-Origin" = "'${var.origin}'"
   }
 }

variables.tf

@@ -11,9 +11,9 @@ variable "methods" {
   description = "List of permitted HTTP methods. OPTIONS is added by default."
 }
 
-variable "origins" {
-  description = "List of permitted origins"
-  default = ["*"]
+variable "origin" {
+  description = "Permitted origin"
+  default = "*"
 }
 
 
@@ -32,6 +32,5 @@ locals {
   defaultHeaders = ["Content-Type", "X-Amz-Date", "Authorization", "X-Api-Key", "X-Amz-Security-Token"]
 
   methods = "${join(",", distinct(concat(var.methods, list(local.methodOptions))))}"
-  origins = "${join(",", var.origins)}"
   headers = "${var.discard_default_headers ? join(",", var.headers) : join(",", distinct(concat(var.headers, local.defaultHeaders)))}"
 }