AWS announces preview of AWS Interconnect - multicloud

AWS announces AWS Interconnect – multicloud (preview), providing simple, resilient, high-speed private connections to other cloud service providers. AWS Interconnect - multicloud is easy to configure and provides high-speed, resilient connectivity with dedicated bandwidth, enabling customers to interconnect AWS networking services such as AWS Transit Gateway, AWS Cloud WAN, and Amazon VPC to other cloud service providers with ease.

Can I make encrypted S3 static website only accessible through CloudFront?

Can I store encrypted files on S3 and then make them available through CloudFront, with the decryption key held by CloudFront? Or is there any other way the build file of the static website is hosted but the files are not accessible by any other IAM.

Topics: Compute Networking & Content Delivery Storage
Tags: Amazon CloudFront Amazon S3 Glacier Storage Website Provisioning Amazon Simple Storage Service
Language: English

Rishabh

asked 2 years ago488 views

1 Answer

Newest
Most votes
Most comments

It is possible to restrict access except via CloudFront.
Follow the steps in the following document to set up OAC.
OAC can be used with S3 default encryption or with encryption using KMS.
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html

The following document explains OAC in detail and should be read once.
https://aws.amazon.com/jp/blogs/networking-and-content-delivery/amazon-cloudfront-introduces-origin-access-control-oac/