Here we are going to see how to host Angular 2 or greater version on AWS S3 using CloudFront.
Let's first understand what is AWS S3, CloudFront, ACM and Route53.
- AWS S3 is cloud storage which used for storing content or media or static web hosting
- CloudFront is like another CDN provided by AWS which is used as endpoint to publish server or S3 content. Its faster content delivery network. It has many endpoint like elastic load balancer or S3 bucket etc.
- ACM is AWS SSL certificate provider (Public SSL/TLS certificates provisioned through AWS Certificate Manager are free. You pay only for the AWS resources you create to run your application.)
- Route53 is network routing provider where can create NS record or A record or CNAME for domain routing. Which gives list of endpoint to select either direct S3 Bucket or CloudFront.
Once got glimpse of terminology let's dive into actual story.
How overall hosting flow works below ππ»
Lets start step by step to create as it shown above architecture :
Create S3 Bucket and set up required configuration. Keep bucket name same as domain name. Like you have domain
www.example.com
then keepwww.example.com
. Here is details steps to set up S3 bucket as website hosting : https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteAccessPermissionsReqd.htmlCreate a Angular build using command
ng build
Copy paste
dist
folder source and paste into S3 bucketSet up S3 website hosting index and error page to index.html. In Angular all page route request should goes to
index.html
for that reason we have set both to index.Set up bucket policy under Permission-> Block Public Access and Permission -> Bucket Policy. ```
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "PublicReadGetObject",
"Effect": "Allow",
"Principal": "",
"Action": [
"s3:GetObject"
],
"Resource": [
"arn:aws:s3:::example.com/"
]
}
]
}
- Create CloudFront endpoint and follow this steps : https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-https-requests-s3/
- Set up Route53 entry for domain. Bucket Policy use this same as below:
Now everything is completed ?
Wait...
One important things is left. Angular has routing and URL rewriting concept inside. Means one page does all routing. index.html
is root file which is responsible for all routing. This above setup will works when your continuously used application without refreshing. If hit refresh then it will give "Access Denied" from S3 bucket.
Answer is S3 doesn't understand route open when you reload and open in new tab. Have to inform S3 is for this route used index.html. Whenever new route open its gives 403 [access denied ] error. for this you need to do setting CloudFront to set 403 error page redirect to index.html.
Open CloudFront -> Select distribution -> Error page -> Create Custom Error Response
Now we are finally done πππ»
You can reach out to me over @aviboy2006 for any clarification or stuck anywhere. You can refer automated deployment script written in Python for Angular build deployment.
Reference :
Top comments (1)
Unfortunately, using error pages to solve a routing problem, you cannot manipulate CSP and other security headers.