Building and Securing a Production Static Website on AWS
Hands-on AWS cloud security case study using CloudFront, private S3 with OAC, DNSSEC, CSP, monitoring, and keyless GitHub OIDC deployment.
AWS
Amazon Route 53 · Amazon CloudFront · Amazon S3 · AWS Certificate Manager · AWS WAF · Amazon CloudWatch · Amazon SNS · AWS CloudTrail · AWS Identity and Access Management · AWS Security Token Service
Security
Private origin · Origin Access Control · DNSSEC · TLS · Content Security Policy · Security headers · Web application firewall · Monitoring and alerting · Audit logging · Federated identity · Least privilege
ArchitectureImplementationValidation
View LabGitHub(opens in a new tab)