resource "aws_cloudfront_distribution" "s3_distribution" {

  default_cache_behavior {
    target_origin_id = "groupS3"
  }

  origin {
    domain_name = "aws_s3_bucket.primary.bucket_regional_domain_name"
    origin_id = "primaryS3"

    s3_origin_config {
      origin_access_identity = "aws_cloudfront_origin_access_identity.default.cloudfront_access_identity_path"
    }
  }

  origin {
    domain_name = "aws_s3_bucket.failover.bucket_regional_domain_name"
    origin_id = "failoverS3"

    s3_origin_config {
      origin_access_identity = "aws_cloudfront_origin_access_identity.default.cloudfront_access_identity_path"
    }
  }

  origin_group {

    member {
      origin_id = "primaryS3"
    }

    member {
      origin_id = "failoverS3"
    }
    origin_id = "groupS3"
  }
}