Back to articles

Tag archive

#cloudfront

AWS CDK 100 Drill Exercises #013: CloudFront S3 Static Website — Serving a Private Bucket over HTTPS with OAC and Cross-Region WAF
Aug 29, 2026

AWS CDK 100 Drill Exercises #013: CloudFront S3 Static Website — Serving a Private Bucket over HTTPS with OAC and Cross-Region WAF

Evolve S3 static website hosting into CloudFront + OAC + WAF. Implement a fully private bucket, security headers including CSP, SPA-friendly error mapping, and how to handle the constraint that CLOUDFRONT-scoped WAFv2 is pinned to us-east-1 with crossRegionReferences in CDK.

Aug 29, 20267 min read0 reactions0 comments