AWS Serverless Web App

Overview

Built a serverless web application on AWS using Amazon S3 and CloudFront for static website hosting, with API Gateway, Lambda, and DynamoDB powering a real-time visitor counter.

Configured a custom domain and HTTPS using AWS Certificate Manager and CloudFront to securely deliver content over TLS.

Live Visitor Counter

Page Views: Loading...

Services Used

Amazon S3 – Hosts the static website files.
Amazon CloudFront – Delivers content globally through a CDN.
AWS Certificate Manager (ACM) – Provides SSL/TLS certificates for secure HTTPS access.
Amazon API Gateway – Exposes the visitor counter API.
AWS Lambda – Updates and returns the visitor count.
Amazon DynamoDB – Stores the page view count.
AWS Key Management Service (KMS) – Manages the customer-managed encryption key used for Amazon S3 encryption at rest.

Skills Demonstrated

Serverless application design, static website hosting, CDN distribution and content delivery, custom domain configuration, SSL/TLS certificate management, REST API development and integration, event-driven compute with AWS Lambda, NoSQL database implementation using DynamoDB, and frontend-to-backend cloud service integration.

Security Enhancements

To strengthen the security of the application, I implemented AWS Key Management Service (KMS) using a customer-managed encryption key (CMK) to protect data stored in Amazon S3. The bucket was configured to use Server-Side Encryption with AWS KMS (SSE-KMS) as the default encryption method, ensuring newly uploaded objects are automatically encrypted at rest.

What I Implemented

• Created a customer-managed AWS KMS encryption key.
• Configured Amazon S3 to use SSE-KMS as the default encryption method.
• Configured IAM administrative and key usage permissions for secure access.
• Enabled automatic key rotation with a 365-day rotation period.
• Enabled S3 Bucket Keys to reduce AWS KMS request costs.
• Verified that newly uploaded objects are encrypted using the customer-managed key.