AWS S3/CloudFront Deployment Skill

Purpose

Defines secure configuration and deployment practices for static websites using AWS S3 for storage and CloudFront CDN for global distribution.

Rules

S3 Bucket Configuration

MUST:

• Block all public access (use CloudFront Origin Access Identity)
• Enable versioning
• Enable server-side encryption (AES-256)
• Enable access logging
• Set lifecycle policies for old versions
• Use least-privilege IAM policies