- Webapp:
- Hosting (S3): where to store app assets?
- CDN (CloudFront): How to distribute assets across the globe?
- DNS (Route53): how to set up DNS? -- optional
- [o] create CDK record set (optional, we may not have access to a domain)
- REST API:
- handlers
- API (CDK):
- webapp
- Database:
- DynamoDB:
- handlers:
- Backend processes:
- app integration:
- Handlers
- assign handlers:
- Security:
- Web App Access Control (Custom auth): How to secure app?
- create authenticate lambda function
- create an endpoint for authentication
- API Access Control (Custon authorizer):
- create the custom authorizer
- add authorizer to private endpoints
- webapp authorization
- use
Authorization
header on http getOrders - use
Authorization
header on http createOrder
- use
- Permission Boundaries
- define Policy Boundary
- attach boundary to all constructs
- Web App Access Control (Custom auth): How to secure app?
Our goal is to deploy a basic single page application to the web, we want to make it avaiable across multiple edge locations so customer will have a fast and reliable experience
For hosting we will be using an S3 bucket wich a cost efective and reliable object store.
Using the CDK create an s3 bucket inside the webapp stack file in either TypeScripr or Python
Using AWS CLI call the command to upload all the relevant files to the S3 bucket you created on the previous step
We will set up a Content Delivery Network to distribute static files (webapp) close to the final customer. For this task we will be leveraging CloudFront