I built a private S3 + CloudFront stack for this blog. AWS recommends Amplify instead. Here’s when each makes sense.
Posts for: #Aws
Plugging the Leaky Bucket
The four S3 misconfigs behind most breaches, and how to prevent them with SCPs.
Hosting a Static Website on a Private S3 Bucket
How I host this blog on a private S3 bucket with CloudFront, OAC, and zero stored credentials.