blog.dliu.com is a blog that anyone can read and only the owner (or an agent with the owner’s API token) can write. There are no servers: published posts are plain files in S3, CloudFront delivers them, and one small Lambda function runs only when the owner signs in, saves a post or uploads a file.
Running costs
Everything is billed per use. With nobody writing, the only charge is storing the pictures and files in S3; reading the blog runs no code.
Security
Anyone can read published posts; only the owner, signed in with Microsoft, can write, publish or delete, and can let an AI agent write with a revocable API token. Draft text never leaves the database.