CHAPTER 03 / YOUR SECURITY LAB

Don’t assume.
Check.

Use this browser-local checklist to rehearse a review of the S3, CloudFront, Route 53, and ACM design. Treat each checked item as a learning observation, not an automated cloud audit.

REVIEW WORKSPACE

Build a habit
of verification.

Your progress stays in this browser. These selections are a learning aid, not automated results from AWS.

0 of 6 reviewed0%

0 of 6

Certificate matches the domainOpen HTTPS with normal certificate verification. Check the hostname and validity period.HTTP redirects to HTTPSInspect the initial HTTP response and its Location header.Anonymous S3 reads are deniedRequest a known object directly from the S3 REST endpoint without credentials.CloudFront uses signed OAC requestsInspect the origin access control and the distribution-scoped bucket policy.All pages and error handling workCheck the five pages, their assets, and a missing path with a true error status.Failure and recovery are independently verifiedRecord the failed observation, diagnosis, approval, restoration, and a passing check.

Don’t assume.Check.

Build a habitof verification.

Don’t assume.
Check.

Build a habit
of verification.