Day 14 - Static Website Hosting using Terraform

Today I worked on my first mini project in my AWS Terraform journey. The goal was to deploy a static website using S3 and CloudFront.

Instead of manually creating resources in AWS, I used Terraform to automate the entire setup.

Architecture

User requests first hit CloudFront. CloudFront securely fetches content from a private S3 bucket using Origin Access Control and delivers it globally.

User → CloudFront → Private S3 Bucket

Project Setup

I organized my Terraform code into multiple files for clarity. Variables, provider configuration, and main resources are separated.


S3 Bucket

The S3 bucket stores the website files. Public access is completely blocked.

This ensures that the bucket is not exposed directly to the internet.

Uploading Files

Terraform automatically uploads all files from the local www folder.

This includes index.html, style.css, and script.js.

I used a loop with fileset to avoid writing multiple resource blocks.



CloudFront Distribution

CloudFront acts as the delivery layer. It provides HTTPS and caches content globally.


Security Setup

Instead of making the bucket public, I used Origin Access Control.

This allows only CloudFront to access the S3 bucket.

This is a more secure and production-ready approach.


Deployment

I used terraform init, plan, and apply to deploy the infrastructure.

Terraform created all resources and returned the website URL.

Testing

After deployment, I opened the CloudFront URL. The website loaded successfully with styling and interactivity.


Challenges

One challenge was understanding how CloudFront accesses a private S3 bucket.

The combination of Origin Access Control and bucket policy solved this.

Another challenge was ensuring correct MIME types so the browser renders files properly.

Key Learnings

This project helped me understand how S3, CloudFront, and Terraform work together.

I learned how to securely host a static website using a private S3 bucket.

I also understood how Terraform simplifies infrastructure creation.

Cleanup

To avoid charges, I used terraform destroy to remove all resources.

Final Thoughts

This project showed me how simple components can form a real-world cloud architecture.

It was a small step, but an important one.

Video Reference



Jay

Comments

Post a Comment

Popular posts from this blog

ASM Integrity check failed with PRCT-1225 and PRCT-1011 errors while creating database using DBCA on Exadata 3 node RAC

Image
  Error: The error message PRCT-1225: failed to verify Oracle Automatic Storage Management (Oracle ASM) user credentials using the command 'asmcmd credverify' indicates that the asmcmd credverify command failed to verify the Oracle ASM user credentials. This can happen for a number of reasons, including: The user credentials are incorrect. The user credentials file is corrupted. The user does not have the necessary permissions to run the asmcmd credverify command. There is a problem with the Oracle ASM instance. To troubleshoot this error, you can try the following: Make sure that the user credentials are correct. You can do this by trying to log in to the Oracle ASM instance using the same credentials. Check the user credentials file for errors. You can do this by using a text editor to open the file and inspect the contents. Make sure that the user has the necessary permissions to run the asmcmd credverify command. You can do this by checking the user's permissi...
Read more

Life is beautiful

Image
Life brings unexpected tragedies that are beyond our control. It's heartbreaking to witness people facing circumstances they never chose. We react with tears and inevitably wonder, "What if that happens to me?" As humans, we naturally focus on the positive and avoid dwelling on such thoughts—and that's healthy. But this perspective has shaped how I approach life: Am I prepared for these scenarios? Are my loved ones protected if something goes wrong? If I were to die, I couldn't be there to tell them to stay strong—they'd have to face that grief alone. But I can give them financial security through proper planning, wills, and trusts. These are tangible ways to care for them even when I'm gone. Beyond that, what else can I control? I don't waste energy worrying about an uncertain past or future. Instead, I choose to spread peace, truly listen to others, and share genuine smiles. I embrace the principle of living fully while letting others do the same. ...
Read more

Lock Tables in MariaDB

Whether or not you need to lock tables while backing up MariaDB depends on a few factors, including the type of backup you are performing and the tools you are using. If you are performing a full backup , you should lock the tables to ensure that the backup is consistent. This is because a full backup copies all of the data in the database, including any data that is currently being modified by transactions. If you do not lock the tables, it is possible that the backup could contain inconsistent data. If you are performing a differential backup or an incremental backup , you may not need to lock the tables. Differential and incremental backups only copy the data that has changed since the previous backup. This means that the data is already consistent, so there is no need to lock the tables. However, some backup tools may require you to lock the tables, even if you are performing a differential or incremental backup. This is because these tools may need to modify the database in some ...
Read more