A WordPress instance is hosted on an Ec2, automatically backed up and available only when a website modification is needed. A Cloudformation template creates the necessary resources (alb, route53 record, acm, lambda) to make the WordPress environment available.

A WordPress plugin is used to deploy the website’s static files in a Github repository. The repo is synced at each Git push to a S3 bucket using IAM access keys with minimum privileges.

The Amazon resources are created/managed using Terraform and deployed into two accounts : Dev and Prod.

Users access the website content available on Cloudfront Edges. A CName record is linked to the CloudFront distribution.

A Cloudfront function restricts the IPs that can access S3 content in Dev environment.