#171 - Provision AWS Amplify

[tsudhakar87]

ℹ️ Issue

Closes #171

📝 Description

Write a short summary of what you added. Why is it important? Any member of C4C should be able to read this and understand your contribution -- not just your team members.

1. added amplify.tf to provision the Amplify app and connect it to the main branch
2. added the GitHub personal access token (PAT) data source to secrets.tf for repo access
3. added api_base_url variable to variables.tf for when backend is deployed

✔️ Verification

What steps did you take to verify your changes work? These should be clear enough for someone to be able to clone the branch and follow the steps themselves.

Not sure how to test? Once merged could look at AWS console --> Amplify and see if main is there

🏕️ (Optional) Future Work / Notes

Did you notice anything ugly during the course of this ticket? Any bugs, design challenges, or unexpected behavior? Write it down so we can clean it up in a future ticket!

[bhuvanh66]

looks good!

[github-actions]

Terraform Plan 📖 infrastructure/aws

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan

aws_s3_bucket.reports_bucket: Refreshing state... [id=c4c-branch-generated-reports20251030194253425700000001]
aws_cognito_user_pool.branch_user_pool: Refreshing state... [id=us-east-2_CxTueqe6g]
aws_s3_bucket_public_access_block.reports_bucket_public_access: Refreshing state... [id=c4c-branch-generated-reports20251030194253425700000001]
aws_s3_bucket_policy.reports_bucket_policy: Refreshing state... [id=c4c-branch-generated-reports20251030194253425700000001]
aws_cognito_user_pool_client.branch_client: Refreshing state... [id=570i6ocj0882qu0ditm4vrr60f]
data.infisical_secrets.rds_folder: Reading...
data.infisical_secrets.github_folder: Reading...
data.infisical_secrets.rds_folder: Read complete after 0s
aws_db_instance.branch_rds: Refreshing state... [id=db-AMMYFTORW6XJGRELV7WQZCNHQI]
data.infisical_secrets.github_folder: Read complete after 0s

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # aws_amplify_app.frontend will be created
  + resource "aws_amplify_app" "frontend" {
      + access_token                = (sensitive value)
      + arn                         = (known after apply)
      + build_spec                  = <<-EOT
            version: 1
            frontend:
              phases:
                preBuild:
                  commands:
                    - npm ci
                build:
                  commands:
                    - npm run build
              artifacts:
                baseDirectory: .next
                files:
                  - '**/*'
              cache:
                paths:
                  - .next/cache/**/*
        EOT
      + custom_headers              = (known after apply)
      + default_domain              = (known after apply)
      + enable_branch_auto_deletion = true
      + environment_variables       = {
          + "AMPLIFY_MONOREPO_APP_ROOT" = "apps/frontend"
          + "NEXT_PUBLIC_API_BASE_URL"  = null
        }
      + id                          = (known after apply)
      + name                        = "branch-frontend"
      + platform                    = "WEB_COMPUTE"
      + production_branch           = (known after apply)
      + region                      = "us-east-2"
      + repository                  = "https://github.com/Code-4-Community/branch"
      + tags_all                    = (known after apply)

      + auto_branch_creation_config (known after apply)

      + cache_config (known after apply)

      + job_config (known after apply)
    }

  # aws_amplify_branch.main will be created
  + resource "aws_amplify_branch" "main" {
      + app_id               = (known after apply)
      + arn                  = (known after apply)
      + associated_resources = (known after apply)
      + branch_name          = "main"
      + custom_domains       = (known after apply)
      + destination_branch   = (known after apply)
      + display_name         = (known after apply)
      + enable_auto_build    = true
      + framework            = "Next.js - SSR"
      + id                   = (known after apply)
      + region               = "us-east-2"
      + source_branch        = (known after apply)
      + stage                = "PRODUCTION"
      + tags_all             = (known after apply)
    }

Plan: 2 to add, 0 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "tfplan"

Pushed by: @tsudhakar87, Action: pull_request

[nourshoreibah]

LGTM! Please monitor the deploy that will go through in the actions tab after you merge and report back! We won't know if this fully works until apply time