Back to articles

Tag archive

#cdk

AWS CDK 100 Drill Exercises #013: CloudFront S3 Static Website — Serving a Private Bucket over HTTPS with OAC and Cross-Region WAF
Aug 29, 2026

AWS CDK 100 Drill Exercises #013: CloudFront S3 Static Website — Serving a Private Bucket over HTTPS with OAC and Cross-Region WAF

Evolve S3 static website hosting into CloudFront + OAC + WAF. Implement a fully private bucket, security headers including CSP, SPA-friendly error mapping, and how to handle the constraint that CLOUDFRONT-scoped WAFv2 is pinned to us-east-1 with crossRegionReferences in CDK.

Aug 29, 20267 min read0 reactions0 comments
AWS CDK 100 Drill Exercises #011: A CodePipeline for CloudFront & S3 — and a self-reference bug
Aug 29, 2026

AWS CDK 100 Drill Exercises #011: A CodePipeline for CloudFront & S3 — and a self-reference bug

Build a CodeCommit → CodeBuild → CodePipeline deployment pipeline for a CloudFront/S3 static site, with an S3 sync Lambda, an async CloudFront invalidation Lambda using the CodePipeline continuation-token pattern, and an opt-in manual approval gate — plus a real CloudFormation self-reference bug this pattern uncovered.

Aug 29, 20268 min read0 reactions0 comments