Store the source
S3 stores HTML, CSS, JavaScript, and illustrations as objects. A private bucket blocks anonymous object reads. This architecture uses its REST endpoint, rather than its public website endpoint.
CHAPTER 01 / THE BUILDING BLOCKSFour services.
Four services.
One clear purpose.
Understand the four services behind the site: S3 stores the source, CloudFront delivers it at the edge, Route 53 resolves the name, and ACM establishes certificate trust. See how their boundaries fit together.
Deliver at the edge
CloudFront receives public HTTPS requests, caches eligible objects, and signs origin requests using Origin Access Control. The bucket policy authorizes the specific distribution.
Resolve the name
Route 53 hosts authoritative DNS records. An alias routes the custom domain to CloudFront. Namecheap delegates DNS to the hosted zone’s nameservers.
Establish trust
AWS Certificate Manager issues the domain’s certificate after DNS validation. CloudFront uses a certificate in us-east-1 to establish a trusted HTTPS connection with visitors.
Static does not
mean unresponsive.
Static describes how files are delivered. The browser can still run JavaScript, adapt layouts, and remember a checklist locally. None of those features requires a continuously running backend.
Our security lab stores your selections in this browser only. It does not inspect your AWS account or certify a deployment.
Try the security lab ↗