skills.rest
TekLabsVN
TekLabsVNOFFICIAL
Explore all skills by this author →
GitHub

aws-s3-cloudfront-setup

Provision a private S3 bucket, CloudFront distribution with OAC, and scoped IAM user.

1|Updated Mar 20, 2026
Search Tags:#security#aws#infrastructure#iam#s3#cloudfront#oac
One-click install
npx skills add https://github.com/TekLabsVN/claude-skills --skill aws-s3-cloudfront-setup
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-s3-cloudfront-setup
Source: https://github.com/TekLabsVN/claude-skills/tree/main/aws-s3-cloudfront-setup
Command: npx skills add https://github.com/TekLabsVN/claude-skills --skill aws-s3-cloudfront-setup

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires aws-cli, jq, and includes scripts (resource) components.

What problem does it solve?

Provisions a secure AWS storage stack: a private S3 bucket, a CloudFront distribution with Origin Access Control, and a scoped IAM user with locally stored credentials.

Core Features & Use Cases

  • Private, encrypted S3 bucket with no public access
  • CloudFront distribution with OAC for controlled public delivery
  • IAM user scoped to the bucket with least privilege, credentials saved locally
  • End-to-end automation for provisioning and hardening storage infrastructure across AWS regions

Quick Start

Create a secure AWS storage stack by running the setup script with bucket name, region, and IAM username.

Frequently Asked Questions about aws-s3-cloudfront-setup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up a secure S3 bucket with CloudFront and restricted access?▼

To set up a secure S3 bucket with CloudFront, you can automate provisioning of a private encrypted bucket, a CloudFront distribution with Origin Access Control, and a scoped IAM user with least-privilege access.

What is CloudFront Origin Access Control and when do I need it for S3?▼

CloudFront Origin Access Control (OAC) is a security feature that allows a CloudFront distribution to securely access a private S3 bucket. You need it to enforce controlled public delivery while keeping the bucket entirely private.

Can I automate IAM user creation and save credentials locally for S3 access?▼

Yes, you can automate IAM user creation scoped to a single S3 bucket with least-privilege permissions. The process provisions the user, enforces access control via IAM, and saves the credentials locally for secure retrieval.

Do I need aws-cli and jq to harden S3 storage infrastructure across AWS regions?▼

Yes, you need the aws-cli to execute AWS API calls for bucket creation and CloudFront setup, and jq to parse JSON responses. These dependencies enable end-to-end automation for hardening storage infrastructure across AWS regions.

What is the best way to enforce least-privilege access for a single S3 bucket?▼

The best way to enforce least-privilege access for a single S3 bucket is by provisioning a scoped IAM user with restricted permissions. This restricts public access and ensures only authorized delivery through CloudFront OAC.

Related Skills

Explore More Software Engineering Skills→
ryancnelsonryancnelson
34

Delegating to AWS Agent

Delegate AWS queries to a sub-agent for EC2, S3, IAM, ECS, and Lambda.

Community
Advanced
HillBombCreationsHillBombCreations

vivreal-media-cdn

Manage S3 bucket naming, presigned uploads, CloudFront CDN, and signed URLs.

Official
Advanced
wgpsecwgpsec
45

AWS Security Hardening

Enforces AWS security best practices for IAM, networking, and data protection.

Official
Advanced
JimothyJohnJimothyJohn

statician

Generate and deploy a static AWS website from a natural-language description.

Community
Advanced