Ravi Sir's Cards › AWS
Public site or CDN edge?
This comparison card contrasts Public site or CDN edge. S3 website public GetObject is described as cheap S3 website endpoint. It also notes principal * GetObject. It also notes open BPA carefully. CloudFront + OAC is described as cloudFront distribution. It also notes OAC. It also notes deny direct S3. The card pairs S3 website public GetObject with tiny marketing pages, and CloudFront + OAC with production web with edge controls.
Read card text
What this card says
Public site or CDN edge?
S3 website public GetObject
Cheap S3 website endpoint; Principal * GetObject; open BPA carefully.
CloudFront + OAC
CloudFront distribution; OAC; deny direct S3.
Key points
Brochure / brochure site with no WAF need.
Global site needing HTTPS custom domain and WAF.
Example
put-bucket-website + public GetObject / CreateDistribution + OAC policy
Use when
Tiny marketing pages.
Production web with edge controls.