deploy frontend from the ec2 at the end of the pipeline

infra/ec2-userdata.sh

@@ -52,6 +52,13 @@ if ! command -v go &>/dev/null; then
 fi
 go version
 
+# --- esbuild ---
+echo "--- Installing esbuild ---"
+if ! command -v esbuild &>/dev/null; then
+    GOBIN=/usr/local/bin /usr/local/go/bin/go install github.com/evanw/esbuild/cmd/esbuild@latest
+fi
+esbuild --version
+
 # --- DuckDB ---
 echo "--- Installing DuckDB ---"
 DUCKDB_VERSION="1.5.2"

infra/main.tf

@@ -190,6 +190,11 @@ resource "aws_iam_role_policy" "s3_access" {
           "arn:aws:s3:::commoncrawl",
           "arn:aws:s3:::commoncrawl/*",
         ]
+      },
+      {
+        Effect = "Allow"
+        Action = ["cloudfront:CreateInvalidation", "cloudfront:ListDistributions"]
+        Resource = "*"
       }
     ]
   })