Skip to content

January 12, 2026

A calm AWS static site delivery path

A practical setup for S3, CloudFront, Route 53, ACM, and GitHub Actions without turning a marketing site into an application platform.

Static websites should be boring to deploy and easy to cache. A strong AWS baseline keeps the S3 bucket private, serves traffic through CloudFront, validates HTTPS with ACM, and keeps DNS in Route 53.

The delivery pipeline should build once, sync immutable assets with long cache headers, sync HTML with short cache headers, and invalidate CloudFront only after the upload succeeds.

The result is a fast public site with a small operational surface area.