aws-s3-cloudfront-setup

Name: aws-s3-cloudfront-setup
Availability: InStock
Author: TekLabsVN

Provision a private S3 bucket, CloudFront distribution with OAC, and scoped IAM user.

1|Updated Mar 20, 2026

Search Tags:#security #aws #infrastructure #iam #s3 #cloudfront #oac

Ready to run

npx skills add https://github.com/TekLabsVN/claude-skills --skill aws-s3-cloudfront-setup

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: aws-s3-cloudfront-setup
Source: https://github.com/TekLabsVN/claude-skills/tree/main/aws-s3-cloudfront-setup
Command: npx skills add https://github.com/TekLabsVN/claude-skills --skill aws-s3-cloudfront-setup

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires aws-cli, jq, and includes scripts (resource) components.

What problem does it solve?

Provisions a secure AWS storage stack: a private S3 bucket, a CloudFront distribution with Origin Access Control, and a scoped IAM user with locally stored credentials.

Core Features & Use Cases

Private, encrypted S3 bucket with no public access
CloudFront distribution with OAC for controlled public delivery
IAM user scoped to the bucket with least privilege, credentials saved locally
End-to-end automation for provisioning and hardening storage infrastructure across AWS regions

Quick Start

Create a secure AWS storage stack by running the setup script with bucket name, region, and IAM username.

Frequently Asked Questions about aws-s3-cloudfront-setup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I set up a secure S3 bucket with CloudFront and restricted access?▼

To set up a secure S3 bucket with CloudFront, you can automate provisioning of a private encrypted bucket, a CloudFront distribution with Origin Access Control, and a scoped IAM user with least-privilege access.

What is CloudFront Origin Access Control and when do I need it for S3?▼

CloudFront Origin Access Control (OAC) is a security feature that allows a CloudFront distribution to securely access a private S3 bucket. You need it to enforce controlled public delivery while keeping the bucket entirely private.

Can I automate IAM user creation and save credentials locally for S3 access?▼

Yes, you can automate IAM user creation scoped to a single S3 bucket with least-privilege permissions. The process provisions the user, enforces access control via IAM, and saves the credentials locally for secure retrieval.

Do I need aws-cli and jq to harden S3 storage infrastructure across AWS regions?▼

Yes, you need the aws-cli to execute AWS API calls for bucket creation and CloudFront setup, and jq to parse JSON responses. These dependencies enable end-to-end automation for hardening storage infrastructure across AWS regions.

What is the best way to enforce least-privilege access for a single S3 bucket?▼

The best way to enforce least-privilege access for a single S3 bucket is by provisioning a scoped IAM user with restricted permissions. This restricts public access and ensures only authorized delivery through CloudFront OAC.