Flawed S3 backend configuration

[jcardinal]

I don't like the http-only configuration for S3 backends, and I believe there is a more elegant way to define an S3 backend for CloudFront that doesn't rely on the S3 website endpoint at all. Locking down the buckets and using secure internal connectivity would be better.

[jcardinal]

I know I've had the previous thought before, tried it, run into issues, and reverted to this setup. I found a couple posts describing similar issues and suggesting this current setup is required for hosting a website this way, and maybe especially for handling redirects.
https://chrismcg.com/2019/01/30/terraform-provisioned-static-site-hosting-on-aws-s3-with-cloudfront/
https://blog.joshwalsh.me/aws-gatsby/