title: Hosting internal S3 Website that's accessible over VPN and is secured with HTTPS
body: <p>I've been looking for a solution to host internal S3 website that's accessible over VPN. Clearly I don't wanna use CLoudFront + WAF to restrict the IP range.</p>
  
  <p>I tried setting up the following,</p>
  
  <ul>
  <li>Created a VPC Endpoint for S3 services</li>
  <li>Created a static S3 website bucket with bucket policy restricting access only through VPC Endpoints.</li>
  <li>Created a private hosted zone and configured an Alias record set to S3 website address</li>
  </ul>
  
  <p>The above solution exposes HTTP endpoint and I wanna secure it with SSL and I'm looking for options.</p>
  
  <p>Have also been looking to setup reverse proxy infront of S3, but couldn't find a clear implementation reference.</p>
  
  <p>Does the above solution would work? Or I'm missing something big?</p>