React SPA deployed to S3 + CloudFront, infrastructure fully defined in Terraform and generated/reviewed through a Claude Code agentic workflow.

A GitHub Actions workflow builds the app and pushes it straight to S3 on every push to main, authenticating to AWS via IAM OIDC — no long-lived access keys stored anywhere. CloudFront serves the built assets over HTTPS and gets its cache invalidated on each deploy. The Terraform, the OIDC role, and the CI workflow itself were all generated and reviewed through a Claude Code agentic workflow — infrastructure written by a dedicated agent, then checked by a security review pass before anything was applied.

React · Terraform · AWS S3 · CloudFront