Topic

#Infrastructure

Infrastructure published

Static Delivery for a Zero-Idle Research Site

research.prosyon.ca is served as a static site from S3 behind CloudFront, with no always-on compute and no per-request cost floor. This paper documents the delivery model end to end: how the bucket and distribution are provisioned, how the CI pipeline resolves the correct deployment target at publish time, and why the build was reduced to a single dependency-free Hugo invocation.

architecture infrastructure aws

Infrastructure published

Two-Phase ACM Validation with External DNS

When the DNS zone lives with an external provider, Terraform cannot create the ACM validation records itself, and a naive single apply deadlocks: CloudFront wants a validated certificate that cannot validate until records exist that the apply is waiting to finish before emitting. This paper documents the two-phase apply that breaks the cycle, and why the distribution is gated behind a flag.

infrastructure aws security