From f77769f75f147805e705b599786cd0949e0f6809 Mon Sep 17 00:00:00 2001
From: graimondo <gaetano.raimondo@dshare.com>
Date: Fri, 2 May 2025 22:31:29 +0200
Subject: [PATCH] Add support for custom CloudFront origin request policies

This update introduces the ability to override CloudFront origin request policy properties for SSR sites.
---
 packages/sst/src/constructs/SsrSite.ts | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/packages/sst/src/constructs/SsrSite.ts b/packages/sst/src/constructs/SsrSite.ts
index f3109576f..2844b44ef 100644
--- a/packages/sst/src/constructs/SsrSite.ts
+++ b/packages/sst/src/constructs/SsrSite.ts
@@ -459,6 +459,12 @@ export interface SsrSiteProps {
      * from the server rendering Lambda.
      */
     responseHeadersPolicy?: IResponseHeadersPolicy;
+
+    /**
+     * Override the CloudFront origin request policy properties for responses
+     * from the server rendering Lambda.
+     */
+    originRequestPolicy?: IOriginRequestPolicy;
     /**
      * Override the CloudFront viewer protocol policy properties.
      * @default ViewerProtocolPolicy.REDIRECT_TO_HTTPS
@@ -878,6 +884,7 @@ export abstract class SsrSite extends Construct implements SSTConstruct {
           compress: true,
           cachePolicy: CachePolicy.CACHING_OPTIMIZED,
           responseHeadersPolicy: cdk?.responseHeadersPolicy,
+          originRequestPolicy: cdk?.originRequestPolicy,
           functionAssociations: cfFunction
             ? [
                 {