Skip to content

feat: Add ALB+S3 hosting mode for private network and GovCloud deployments#244

Closed
rcgeorge wants to merge 4 commits intoaws-solutions-library-samples:mainfrom
rcgeorge:main
Closed

feat: Add ALB+S3 hosting mode for private network and GovCloud deployments#244
rcgeorge wants to merge 4 commits intoaws-solutions-library-samples:mainfrom
rcgeorge:main

Conversation

@rcgeorge
Copy link
Copy Markdown
Contributor

Adds an alternative web UI hosting option using Application Load Balancer
with S3 VPC Interface Endpoint, replacing CloudFront for environments
that require VPC-based hosting (GovCloud, private networks).

  • New WebUIHosting parameter (CloudFront | ALB) with conditional resource creation
  • ALB nested stack with S3 VPC endpoint, security groups, target registration
  • Host-header and URL rewrite transforms for S3 static content serving
  • All CORS origins, Cognito callbacks, and CodeBuild env vars resolve
    conditionally based on hosting mode
  • Self-signed certificate helper script for demo/testing
  • Fix CLI --parameters parsing for comma-delimited values (e.g., subnet lists)

rcgeorge and others added 4 commits March 18, 2026 09:36
- Add WebUIHosting parameter (CloudFront/ALB) to main template
- Add ALB hosting nested stack (VPC endpoint, security groups, target registration, listener rules)
- Add ELB access log permissions to logging bucket policy
- Make CloudFront resources conditional on UseCloudFrontHosting
- Make S3 website configuration conditional (disabled for ALB mode)
- Scope VPC endpoint policy to WebUI bucket only
- Update CORS origins, Cognito callbacks, CodeBuild env vars for ALB mode
- Add self-signed cert generation script for testing
- Register alb-hosting as build component in publish.py
feat: Add ALB+S3 hosting mode for private network and GovCloud deployments
@rcgeorge rcgeorge marked this pull request as draft March 18, 2026 15:58
@rcgeorge rcgeorge closed this Mar 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant