To learn more, see this blog post.
It creates a Lambda function behind an API Gateway that returns a HTML with an image. The image href is a signed URL for an object stored in a private bucket. There is a CloudFront distribution that proxies requests to the bucket.
The signed URL's domain is changed to CloudFront's and the distribution translates it back to the original URL. With this setup, the image is downloaded through CloudFront but uses the signing mechanism of S3.
Caching is configured on the CloudFront distribution and the signed URLs are made cache-friendly using time rounding. See this article for more info.
The result is subsequent requests to the image comes from CloudFront's cache instead of going all the way to the bucket.
- npm
- terraform
terraform initterraform apply- open the URL
- open the devtools, check "Disable cache" on the network panel, then refresh the page a few times
terraform destroy
The image is from the https://thecatapi.com/.