A place for every service
Storage, delivery, DNS, and certificates solve different problems. Learn where one responsibility ends and another begins.
Explore the conceptA FIELD GUIDE TO THE CLOUDSmall website.
Small website.
Serious foundations.
Explore how S3, CloudFront, Route 53, and ACM work together to deliver a secure static website. Learn the architecture, trace a request, and test your security instincts.
Start exploring
FIG. 01 / A SECURE DELIVERY PATH04AWS services
05Connected chapters
01Private origin
A practical introduction.
A clear path from request to response.
START WITH THE WHYUnderstand the pieces.
Understand the pieces.
Then connect the dots.
No always-on server. No mystery layers.
Just the essentials of secure static delivery.
Follow a single request
See how a domain resolves, an encrypted connection opens, and CloudFront retrieves a file from a private origin.
Explore the conceptThink like a reviewer
Work through a local security checklist. Separate what a configuration promises from what a real test proves.
Explore the conceptTHE IDEA THAT TIES IT TOGETHERPublic website.
Public website.
Private storage.
Visitors can read the website without receiving direct access to the bucket. CloudFront is the public delivery layer; its signed requests are authorized to read the origin.
Walk through the architectureYOUR BROWSER↓ HTTPSCLOUDFRONT↓ SIGNED REQUESTPRIVATE S3 BUCKET ▣