I've been looking for a solution to host internal S3 website that's accessible over VPN. Clearly I don't wanna use CLoudFront + WAF to restrict the IP range.
I tried setting up the following,
- Created a VPC Endpoint for S3 services
- Created a static S3 website bucket with bucket policy restricting access only through VPC Endpoints.
- Created a private hosted zone and configured an Alias record set to S3 website address
The above solution exposes HTTP endpoint and I wanna secure it with SSL and I'm looking for options.
Have also been looking to setup reverse proxy infront of S3, but couldn't find a clear implementation reference.
Does the above solution would work? Or I'm missing something big?