Least Privilege Role for Your AWS Static Site

Mon, 04 Jul 2022 00:00:00 +0000

Let’s say you’ve deployed a static site on our AWS account using Cloudfront and S3, such as described in Automated Static Site Deployment in AWS Using Terraform. When it comes time to update its content or tweak some settings, using an all-powerful AWS admin account is bad security practice (not to mention overkill).

The Terraform Module

I wrote the terraform-static-site-deploy-role Terraform module to make it easier to set up a role that grants just the right amount of access to manage a site’s AWS resources. What it does is quite simple:

Automated Static Site Deployment in AWS Using Terraform

Mon, 02 May 2022 00:00:00 +0000

This is a quick and reusable way to deploy an AWS-hosted environment for static sites generated by the likes of Hugo and Jekyll. The code is written in Terraform, which allows us to set up (and tear down, if needed) all the necessary components just by running a few commands.

I found several good articles and examples online. However, there was not a single source that had everything I needed. My requirements were:

Devops on $ pirx^H^H^H^H

Least Privilege Role for Your AWS Static Site

The Terraform Module

Automated Static Site Deployment in AWS Using Terraform