Global static site with a private S3 origin
Easy
Secure Architectures
Task 1.2: Design secure workloads and applications
QuestionWatch the method
Predict first. Then watch short phrases—not full sentences—drive the decision.
Scenario
Aster Labs publishes a static documentation and marketing site: HTML, CSS, JavaScript, and about 900 product screenshots, held in one S3 bucket in eu-west-1.
Readers open it from three continents, and the two-person platform team wants every asset answered by a cache close to the reader rather than the single Region.
A security review closed with one rule: viewers may reach the site only through the CDN, and no browser request may read an object from the bucket itself.
Question
Which architecture keeps the S3 origin private while serving the site from the edge?
Model → Coach → Solo·Model · step 1 of 5 · not started
Activity timeline · 1 events
- 01coach · Make a prediction, record your confidence, then watch the reasoning method.