Deploy: GitHub Actions + S3 + CloudFront

Fri, 12 Dec 2025 00:00:00 +0000

Deploy a static site to AWS S3 with CloudFront HTTPS.

Prerequisites

AWS CLI configured
Domain in Route53
GitHub repo

1. Create S3 Bucket

BUCKET_NAME="yourdomain.com"
aws s3 mb s3://$BUCKET_NAME --region us-east-1

# Enable static website hosting
aws s3 website s3://$BUCKET_NAME --index-document index.html --error-document 404.html

# Bucket policy for public read
cat > /tmp/bucket-policy.json << 'EOF'
{
    "Version": "2012-10-17",
    "Statement": [{
        "Effect": "Allow",
        "Principal": "*",
        "Action": "s3:GetObject",
        "Resource": "arn:aws:s3:::BUCKET_NAME/*"
    }]
}
EOF
sed -i '' "s/BUCKET_NAME/$BUCKET_NAME/g" /tmp/bucket-policy.json
aws s3api put-bucket-policy --bucket $BUCKET_NAME --policy file:///tmp/bucket-policy.json

2. Create ACM Certificate (us-east-1 required for CloudFront)

aws acm request-certificate \
    --domain-name yourdomain.com \
    --validation-method DNS \
    --region us-east-1

Add the CNAME record to Route53 for validation.

3. Create CloudFront Distribution

aws cloudfront create-distribution \
    --origin-domain-name $BUCKET_NAME.s3-website-us-east-1.amazonaws.com \
    --default-root-object index.html

Configure:

Alternate domain name (CNAME): yourdomain.com
SSL certificate: select ACM cert
Viewer protocol policy: Redirect HTTP to HTTPS

4. Route53 A Record

Create alias record pointing to CloudFront distribution.

5. GitHub Actions Workflow

.github/workflows/deploy.yml:

name: Deploy to S3

on:
  push:
    branches: [main, develop]

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Setup Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.2'
          bundler-cache: true

      - name: Build Jekyll
        run: bundle exec jekyll build

      - name: Configure AWS
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: $
          aws-secret-access-key: $
          aws-region: us-east-1

      - name: Deploy to S3
        run: aws s3 sync _site/ s3://$ --delete

      - name: Invalidate CloudFront
        run: |
          aws cloudfront create-invalidation \
            --distribution-id $ \
            --paths "/*"

6. GitHub Secrets Required

AWS_ACCESS_KEY_ID
AWS_SECRET_ACCESS_KEY
S3_BUCKET
CLOUDFRONT_DISTRIBUTION_ID

IAM Policy for Deploy User

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": ["s3:PutObject", "s3:DeleteObject", "s3:ListBucket"],
            "Resource": ["arn:aws:s3:::yourdomain.com", "arn:aws:s3:::yourdomain.com/*"]
        },
        {
            "Effect": "Allow",
            "Action": "cloudfront:CreateInvalidation",
            "Resource": "*"
        }
    ]
}

Project Setup: AI-Assisted Development Workflow

Wed, 10 Dec 2025 00:00:00 +0000

Set up this repository for AI-assisted development with automatic context injection.

Create These Files

1. `.gitmessage` - Commit Template

# : 
#
# Types: feat, fix, refactor, perf, docs, test, chore
#
# Body: explain WHAT and WHY (not how)
#
# Bug Risk: low/medium/high
# Areas to watch:

2. `.githooks/prepare-commit-msg`

#!/bin/bash
COMMIT_MSG_FILE=$1
COMMIT_SOURCE=$2

if [ -z "$COMMIT_SOURCE" ]; then
    DIFF=$(git diff --cached)
    echo "" >> "$COMMIT_MSG_FILE"
    echo "# Staged changes (for context, will be stripped):" >> "$COMMIT_MSG_FILE"
    echo "$DIFF" | sed 's/^/# /' >> "$COMMIT_MSG_FILE"
fi

3. `.githooks/post-commit`

#!/bin/bash
echo ""
echo "=== Current Priorities ==="
if [ -f "workplan.txt" ]; then
    head -20 workplan.txt
fi

4. `.githooks/post-checkout`

#!/bin/bash
BRANCH_CHECKOUT=$3
if [ "$BRANCH_CHECKOUT" = "1" ]; then
    echo "=== Recent commits ==="
    git log --oneline -10
    echo "=== Priorities ==="
    [ -f "workplan.txt" ] && head -10 workplan.txt
fi

5. Enable hooks

chmod +x .githooks/*
git config core.hooksPath .githooks
git config commit.template .gitmessage

6. `CLAUDE.md` - AI Context File

Create a CLAUDE.md with:

Project architecture overview
Module responsibilities
Common patterns used
Performance hotspots
Testing checklist

Branch Strategy

stable - releases
develop - PRs merge here
feature/, bugfix/ - work branches

Labels to Create

gh label create feature --color 0E8A16
gh label create bugfix --color D93F0B
gh label create showstopping --color B60205
gh label create tablestakes --color FBCA04

zinkem AI Prompts