How to use amazon s3 and cloudfront to host image

[mylamour]

1. create a s3 bucket

• enable server side encryption
• setting accees only with cloudfront ( you can do it when cloudfront was created)

{
    "Version": "2008-10-17",
    "Id": "PolicyForCloudFrontPrivateContent",
    "Statement": [
        {
            "Sid": "AllowCloudFrontServicePrincipal",
            "Effect": "Allow",
            "Principal": {
                "Service": "cloudfront.amazonaws.com"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::your bucketname/*",
            "Condition": {
                "StringEquals": {
                    "AWS:SourceArn": "replace with your arn"
                }
            }
        }
    ]
}

• create folder named images and assets (this step was optional)

3. create certicate in aws certificate manager
   

4. create cloudfront instance wth s3 backend and domain binding with origin access control

• please set https only

5. finally, you saw it worked.