Static site on S3 + CloudFront, ACM cert, Terraform-managed.
…
If you can read this over HTTPS at , the pipeline works.