Architecture
Four AWS services work together to deliver this site. Each one has a single job.
Amazon S3
Stores the HTML, CSS, and JavaScript files. All public access is blocked, so the files cannot be opened from an S3 address.
Amazon CloudFront
Serves the files from edge locations, redirects HTTP to HTTPS, and reads from S3 using Origin Access Control.
AWS Certificate Manager
Issues and renews the TLS certificate for csce412fikretisik.me, validated through DNS.
Amazon Route 53
Hosts the DNS zone for the domain and points it to the CloudFront distribution with an alias record.
Security choices
The bucket policy allows reads only from this site's CloudFront distribution. Visitors who try the bucket's own address get an Access Denied error. Every plain HTTP request is redirected to HTTPS, and missing pages return a custom 404 page instead of an S3 error.