01
DNS
Amazon Route 53
Hosts the maliawco.com public DNS zone and points the apex domain directly to CloudFront with alias records. The hosted zone is attached to the CloudFront pricing plan.
Built collaboratively with AI
Small site.
Serious architecture.
A low-cost, AWS-native résumé site engineered to be secure, observable, reproducible, and entirely serverless—without paying for infrastructure that sits idle.
$0CloudFront Free plan
0always-on servers
90 daysrequest-log retention
US onlyWAF geographic access
The request path
One request.
Six managed services.
Every layer has a narrow job. Managed AWS services scale down when quiet and absorb traffic without a fleet of servers running around the clock.
02
Delivery + cost control
Amazon CloudFront
Delivers the site from AWS edge locations, redirects viewers to HTTPS, compresses responses, and caches the complete pages so repeat visits rarely reach the origin. The Free flat-rate plan provides predictable CDN pricing with no traffic overages.
03
Edge security
AWS WAF
Inspects requests before they reach the origin. A geographic rule limits access to the United States, while the AWS Managed Common Rule Set blocks common web exploits and unwanted traffic.
04
Serverless origin
Amazon API Gateway
Returns each complete HTML document through a mock integration. There is no application server, container, function, database, operating system, or runtime to patch and keep running.
05
Audit trail
Amazon S3 logging
Receives WAF request records, including source IP, country, action, and request details. Logs are organized by year, month, and day and automatically deleted after 90 days.
06
Immutable infrastructure
AWS CloudFormation
Defines the website and its supporting AWS resources as one repeatable stack. The page content is versioned into each API Gateway deployment, making changes deliberate and reproducible.
Why it is inexpensive
Pay for delivery,
not idle capacity.
CloudFront caches pages at the edge, dramatically reducing calls to API Gateway. Its Free flat-rate plan protects against unexpected CDN overages and includes WAF, DNS, TLS, and log-ingestion benefits.
API Gateway serves static responses without Lambda. S3 stores only compact security logs and removes them automatically. There are no EC2 instances, load balancers, containers, databases, NAT gateways, or 24×7 compute charges.
Human judgment + AI acceleration
Designed together.
Owned as code.
This site was created through collaboration between John Maliawco and OpenAI Codex. AI helped translate the résumé and architectural goals into design and infrastructure code; the resulting AWS resources remain transparent, reviewable, and controlled by their owner.