Browser Viewer request (HTTPS) CloudFront CDN + Edge Cache S3 Bucket Private Origin

Architecture

This project uses a simple but production-grade cloud architecture to deliver a static website securely and efficiently. When a user opens the site, their browser sends an HTTPS request to Amazon CloudFront, which acts as the public entry point and global content delivery network. CloudFront serves cached content from the nearest edge location for speed, and on a cache miss it securely retrieves files from a private Amazon S3 bucket. The S3 bucket is never exposed to the public; access is restricted using Origin Access Control so that only the CloudFront distribution can read the files. This design mirrors real-world cloud deployments by combining performance, security, and cost efficiency in a clean, scalable architecture.