PIS sandbox

This page is a placeholder, not the application. The SPA lives in pis/web and is published here by that repository's pipeline once S12 extracts it. This exists so S13 and S14 can be proven before the frontend does.

What it proves

The bucket is private

Reached only through CloudFront's origin access control.

Deep links survive a refresh

Try /orders/123 and reload. S3 answers 403 for a missing key on a private bucket, not 404, so both are rewritten to this page with a 200.

One hostname, two origins

Checking /v1/ops/version…