/designs/0002-aws-static-hosting-security/

0002 - AWS Static Hosting, Artifact Publishing, and Offsite Encrypted Backups

Design 0002 defines the private S3 plus CloudFront hosting setup for this site: HTTPS, origin access control, private buckets, DNS, budgets, and short-lived publish credentials. It omits private repository and runner details.