[GH Request] Spike: Use cloudfront instead of Cloudflare to front sandbox.openedx.org

[feanil]

Firm Name

Axim

Urgency

Low (2 weeks)

Problem/Request

We currently use Cloudflare to front(CDN) the sandbox.openedx.org site. This has some issues because we don't fully delegate all of our DNS to cloudflare and we don't pay extra to have multi-level TLS certificates. This means that it is not easy to have non-wildcard sub-sub-domains in cloudfront. Try to use cloudfront instead for this sub domain and its sub-sub-domains(*.sandbox.openedx.org) and see if it's easier to manage TLS that way while getting what we need in terms of security and performance.

Reasoning

• Continuing to try to use cloudflare the way we're setup right now is annoying and requires us to pay more. If we can use cloudfront and simplify our infrastructure(reduce dependency on cloudflare) that might make it simpler and easier to manage our infrastructure. This spike can tell us how complex that might be.

[github-actions]

Thank you for your report! @openedx/axim-oncall will triage within a business day. Simple requests usually take 2-3 business days to resolve; more complex requests could take longer.