Deployment checks
Evidence before assumptions.
A working homepage is one part of a complete deployment. These checks describe what must be verified independently.
Public access
Open the custom domain in a private browser window and follow every navigation link.
Encrypted delivery
Inspect the certificate for the correct domain, then request the HTTP address and confirm redirection to HTTPS.
Private origin
Request a known object directly from its S3 URL without credentials. Access should be denied while the same object remains accessible through CloudFront.
Missing resources
Configure CloudFront error responses for 403 and 404 to use /404.html with HTTP status 404, then request a nonexistent page.
This page describes the validation process. It does not report unrecorded test results.