AWS
Web Apps
starter
Global Static Website — AWS Architecture Template
Globally cached static site served from S3 through CloudFront with WAF protection at the edge.
Why this architecture works
- CloudFront in front of S3 keeps the bucket private and serves content from edge locations for low latency
- WAF attached at the CDN blocks common exploits before they ever reach your origin
- KMS-encrypted bucket satisfies encryption-at-rest requirements with zero application changes
- Route 53 alias records give apex-domain support and health-checked DNS
What's inside (6 resources)
DNS
aws-route53
WAF
aws-waf
CloudFront CDN
aws-cloudfront
Static Site Bucket
aws-s3
Encryption Key
aws-kms
Access Metrics
aws-cloudwatch
From template to running infrastructure
- Open this template in the CloudForge visual designer (free account, no credit card).
- Customize resources, names, and connections on the drag-and-drop canvas — or ask Vani, the AI architect, to adapt it.
- Generate production-ready Terraform or CloudFormation in one click.
- Review the plan diff and security scan, then deploy with human approval.