•4 min read
The Path Not Found Is the Point
Scanners arrive with a shopping list: WordPress, admin panels, .env files, and login forms. A static site has none of those. That absence turns the site into a passive honeypot.
Read moreTag: aws
12 posts found.
•5 min read
Why Toronto! and Why, Toronto?
One CloudFront edge location dominated the probe traffic by a factor of six. Pulling that thread led to Azure Canada Central and a particular kind of internet scavenger.
Read more•6 min read
Knock Knock, Who's There?
A static site with no login pages, no forms, and no commercial value still attracts thousands of unsolicited requests per month. This is what that traffic contains.
Read more•5 min read
Why I Used CloudFront Functions Instead of Lambda@Edge
Why a CloudFront Function was the right choice for canonical host redirects and URL rewriting, and what would change that decision.
Read more•8 min read
Self-Hosted Analytics on AWS
A privacy-preserving analytics pipeline on AWS, built to cost almost nothing.
Read more•5 min read
Emergent Architecture from Constraints
How ruling things out did most of the design work.
Read more•4 min read
Why S3 Returns 403 When It Means 404
S3 returns 403 for missing objects when the caller lacks ListBucket permission. Here's why, and how to fix it for static sites on CloudFront.
Read more•5 min read
Caching for Consistency: A Balanced Static Site Strategy
Implementing a tiered caching strategy that balances high-performance delivery for assets with immediate consistency for content updates.
Read more•6 min read
Modern AWS Authentication: Humans vs Automation
How to simplify your AWS security model by clearly separating human access from automated deployment.
Read more•3 min read
Security Boundaries in Small Systems
Why security is about explicit intent rather than system size, and how to implement robust boundaries without enterprise complexity.
Read more