Served by Amazon S3

One distribution, two origins

This page lives in a private S3 bucket that only CloudFront can read, through Origin Access Control. The same hostname also serves content from an EC2 instance in a private subnet, reached over a CloudFront VPC origin. Which one answers depends entirely on the request path.

• /cities/images/

  Static assets from S3, cached at the edge, so repeat requests never reach the bucket.

• /cities/vendors/

  Served by the private EC2 instance. Caching is off here, so every request reaches the origin.

Links point at index.html explicitly: the S3 REST endpoint has no directory index, so /cities/images/ on its own returns an error.