samhstn/website

Ensure s3 buckets aren't publicly accessible

Closed this issue · 1 comments

Our S3 buckets are currently publicly accessible.

We should make sure that S3 buckets are not directly accessible, but are only accessible through CloudFront - explained in this article: https://aws.amazon.com/blogs/networking-and-content-delivery/amazon-s3-amazon-cloudfront-a-match-made-in-the-cloud.

No longer serving content from s3, using ec2 instances as the origin instead