I've been experimenting with various methods to secure my backend hosted on Elastic Beanstalk, aiming to send my httpOnly JWT cookies from the backend to the frontend. My frontend is currently secured through CloudFront and S3, but I'm struggling to find a way to secure the backend without incurring costs for a domain. Does anyone have suggestions on how I can achieve this, or is purchasing a domain truly the only option?
1 Answer
Using a CloudFront domain for your app, huh? Just a heads up, domains can be pretty cheap, around $10 a year. If that’s an issue for you, maybe reconsider using AWS altogether for now.

I’m currently on the free tier because I’m just starting with AWS and trying to learn how it all works. I have S3 to host my frontend, and I’m using CloudFront to get the HTTPS URL. My backend is Elastic Beanstalk with an RDS database.