From name to content
DNS finds the destination. The edge terminates HTTPS. A private origin holds the files.
Explore delivery →A field guide to cloud computingSmall website.
Small website.
Thoughtful
infrastructure.
Follow a web request from a custom domain to a private origin. Explore the services, security boundaries, and agent workflows behind a static cloud website.
One request / four servicesPUBLIC AT THE EDGE.
PRIVATE AT THE ORIGIN.
Route 53RESOLVE
CloudFront + ACMDELIVER
Private S3 bucketSTORE
PRIVATE AT THE ORIGIN.
Understand the pieces.
Three perspectives on the same system.
Access with intention
Public website content does not require a public bucket. Give each component only the access it needs.
Explore security →Agents with evidence
Specialized agents plan and review. Approved tools execute. Recorded observations establish what worked.
Explore agents →Make the concepts stick.
Test a request-path question and track your learning goals.