S3 + CloudFront hosting
One private S3 bucket per environment behind CloudFront with Origin Access Control. Custom domains get an ACM certificate and alias automatically.
blogwright
Full operations for a blog site on AWS. One CLI, no CloudFormation, no Terraform, no CDK.
Builds in a Lambda MicroVM
Every deploy zips your repo, builds it in an isolated MicroVM with
pnpm install && pnpm build, and syncs the output to S3 — only changed
files are re-uploaded and only changed paths are invalidated.
PR previews & CI deploys
A shared preview stack serves every pull request at its own subdomain, and GitHub OIDC deploy roles mean CI never stores AWS keys.
standard.site publishing
Mirror your posts to your AT Protocol PDS as standard.site records, with OAuth handled by the CLI and deterministic record keys derived from URLs.