torus-tools / stack

Deploy static websites to the AWS Cloud using a single command.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Restrict Access to S3 Content with an OAI in Cloudfront

lucaskardo opened this issue · comments

It's a better practice to route all traffic trough Cloudfront Origins and avoid exposing the S3 bucket to the public.

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html