PROJECT / FINISHED
Cloud DevOps Blog
A personal portfolio and field-notes platform designed as a real AWS delivery project rather than a static mockup.
Architecture
The public site is stored in a private S3 bucket and delivered through CloudFront using Origin Access Control. Route 53 provides the custom domain, while ACM provides TLS certificates for HTTPS.
An authenticated editor uses Cognito, API Gateway, and Lambda to publish posts and upload media without exposing long-lived AWS credentials in the browser.
Features
- Terraform-managed AWS infrastructure
- Private S3 origin with CloudFront OAC
- S3 versioning and lifecycle cleanup
- Secure serverless publishing workflow
- Custom domain, HTTPS, and cache invalidation