NRVCLOUD LAB
SYSTEM DESIGN / 01

Cloud architecture

A secure, reproducible delivery path built around approved AWS services—without a continuously running web server.

Delivery diagram: domain and Route 53 DNS, HTTPS through CloudFront, private S3 origin via OAC
ORIGIN

Amazon S3

Stores HTML, CSS, JavaScript, images, and the custom 404 page. Public access stays blocked.

DELIVERY

Amazon CloudFront

Terminates HTTPS, caches static content, redirects HTTP to HTTPS, and signs origin requests with OAC.

ADDRESSING

Route 53 + Namecheap

The registered custom domain resolves to CloudFront through Route 53 DNS. Domain registration is handled separately.

IDENTITY

AWS Certificate Manager

Issues a domain-matching TLS certificate in us-east-1 for the CloudFront custom hostname.

Deployment state: This page explains the target architecture. Actual deployment, validation, and domain configuration must be demonstrated with real AWS evidence.