Adding TLS to your S3 static site with Cloudfront
Step n+1 in the process of moving josh.sg to a static site (steps 0 through n are right here) was to enable TLS encryption. Gone are the days when you had to fork out squillions of dollars for an SSL certificate if you wanted that fancy padlock in the address bar; these days, Amazon Certificate Manager hands them out for free. If you’re not wedded to the AWS ecosystem, the good folks at Let’s Encrypt hand out free certs as well, with their Clarkes-Third-Law-level magic configuration software.