Skip to content
mike@portfolio:~$

~/work/portfolio-site.md

$ cd ..

This portfolio

A static, statically-hosted personal site built with Astro and shipped to AWS via an automated, keyless pipeline.

Designer & Engineer · 2026

AstroTypeScriptTailwind CSSAWSCloudFrontGitHub Actions

# mdiperna.com →

This site is intentionally boring infrastructure: static HTML from Astro, served from a private S3 bucket behind CloudFront (Origin Access Control), on an ACM certificate in us-east-1 with Route 53 DNS.

Deploys are fully automated and keyless — GitHub Actions authenticates to AWS with OIDC (no long-lived access keys exist), builds the site, syncs it to S3 with a two-tier cache policy, and invalidates the CDN. Local development runs the same build inside Docker for parity with what ships.

[0]