Using AWS CloudFormation I set up a CloudFront distribution to serve content from a private S3 bucket. I do not have the bucket configured as an S3 website — rather, I'm using the latest-and-greatest technique: Origin Access Control (OAC). See…
So I am trying to host a full stack web application in AWS. I have a angular frontend sitting in an s3 bucket behind cloudfront and using a domain from route53. On the backend I have an typescript express project…
I'm trying to find out how to bind A record created in AWS Route 53 hosted zone and my custom domain artem-dev.link bought not on AWS. Here is my A record directs to Cloudfront distribution: And this is how my…
I have set up an on-demand video service in AWS. After uploading a video to the S3 input bucket, a Lambda function is automatically triggered, which does HLS streaming with the object to a specific folder in the output bucket.…
#WAF Code Resources: MyWaf: Type: 'AWS::WAFv2::WebACL' Properties: Name: My-waf Scope: CLOUDFRONT DefaultAction: Block: {} VisibilityConfig: CloudWatchMetricsEnabled: true MetricName: my-waf-metric SampledRequestsEnabled: true Rules: - Name: AWSManagedRulesCommonRuleSet Statement: ManagedRuleGroupStatement: VendorName: AWS Name: CommonRuleSet Priority: 1 Action: Block: {} OverrideAction: Count: {} VisibilityConfig:…
I have an app which currently using S3 to store images, and it took a lot of time to load images in my mobile app. Now I'm looking for a better way to optimize the loading time. One possible solution…
I've two scenarios Single S3 bucket will hold data for multiple environments Single S3 bucket which will holds data for single environment In both these scenarios bucket will be private and public to CloudFront only Where I want to restrict…
I am trying to allow countries via CloudFront as per our business requirement. Now this works easily due to their Geo restrictions. Now the issue is that my country is also blocked but I want to allow my IP address…
I use an AWS Cloudfront + S3 solution to host my website. I redirect all naked domain and vanilla HTTP requests to the prefix https://www.example.com. The following S3 Cloudfront Architecture cartoon captures my approach: In addition to the existing logic,…
I have a file named sdk.js. This file name is not versioned or hashed in any way because we don't control the sites where it is embedded so the name must remain consistent. The browser should cache this file but…