How I Designed a Security-First AWS Architecture for My Website
How I designed my AWS website around a private S3 origin, CloudFront, temporary deployment identity, validation, and explicit security trade-offs.
Bruno Arruda9 min read
TOPICS
Resources about Secure Architecture
Security-focused AWS architecture patterns, multi-account design, resilience, governance, and architectural decision-making.
Articles
1 article
Labs
Building and Securing a Production Static Website on AWS
Hands-on AWS cloud security case study using CloudFront, private S3 with OAC, DNSSEC, CSP, monitoring, and keyless GitHub OIDC deployment.
AWS
Amazon Route 53 · Amazon CloudFront · Amazon S3 · AWS Certificate Manager · AWS WAF · Amazon CloudWatch · Amazon SNS · AWS CloudTrail · AWS Identity and Access Management · AWS Security Token Service
Security
Private origin · Origin Access Control · DNSSEC · TLS · Content Security Policy · Security headers · Web application firewall · Monitoring and alerting · Audit logging · Federated identity · Least privilege
ArchitectureImplementationValidation
View LabGitHub(opens in a new tab)