Storage has a role.
Amazon S3 stores the website’s HTML, styles, JavaScript, and images. The project requires the bucket and its objects to remain private.
Remember: Storing files and delivering them publicly are separate responsibilities.
THE LEARNING PATHS
Small steps.
Solid foundations.
Explore the building blocks of a secure static website.
Showing all 6 topics
A public front door.
CloudFront serves the website to visitors. It connects the public website experience to the protected content stored in S3.
Remember: Verify that the required pages and assets are actually delivered.
A name people can use.
The domain is registered through Namecheap. Route 53 manages the DNS records that route visitors toward the configured website.
Remember: Domain registration and DNS management have different jobs.
Make HTTPS verifiable.
AWS Certificate Manager supplies a certificate for the domain. The website must use valid HTTPS and redirect HTTP requests to HTTPS.
Remember: Check the certificate’s hostname, not just a browser’s address bar.
Private means tested.
A public CloudFront website does not require anonymous public access to S3. Test direct anonymous access to a known website object and record the denial.
Remember: An agent’s claim is not a substitute for technical evidence.
Recover with intention.
Introduce only a controlled, reversible failure in your own environment. Detect it, diagnose it, obtain approval for a consequential correction, and verify recovery.
Remember: Save a known-good configuration before changing it.