static-frontend-hosting
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance and code snippets for setting up a static frontend hosting environment on AWS. The patterns described follow industry standard security practices.
- [SAFE]: The S3 bucket configuration explicitly enables
s3.BlockPublicAccess.BLOCK_ALL, ensuring the content is not accessible to the public internet directly, which is a key security measure for static hosting. - [SAFE]: The CloudFront distribution setup correctly references an S3 Origin, facilitating the use of Origin Access Control (OAC) to restrict bucket access solely to the CDN.
- [SAFE]: The Lambda@Edge authentication handler implements security-best-practice cookie attributes, specifically
SecureandHttpOnly, to protect session tokens from cross-site scripting (XSS) and insecure transmission. - [SAFE]: The pattern documentation includes a token validation step within the authentication logic and provides guidance on deployment pipelines and multi-region constraints without introducing malicious commands or obfuscation.
Audit Metadata