title: Static site on S3 with Github OAuth?
body: <p>Title says it all: is it possible to host a static-generated site on S3 and restrict access to it based on Github OAuth?</p>
  
  <p>Scenario: You generate a static site (using <a href="https://gohugo.io/" rel="noreferrer">Hugo</a> or whatever) and you <a href="http://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html" rel="noreferrer">upload it to S3 as a static site</a>. Is there some combination of AWS services (API Gateway, Lambda, etc.) that can make it so that only members of my Github organization can access this site? Authenticating with <a href="https://developer.github.com/v3/oauth/" rel="noreferrer">Github's OAuth</a>? Anyone not authenticated should be treated with a 404.</p>
  
  <p>Has anyone done this or know how to do it? Is such a thing possible <a href="https://github.com/benbalter/jekyll-auth#the-problem" rel="noreferrer"><strong><em>without</em></strong> running a backing server (EC2, Heroku, DigitalOcean Droplet, etc.) of some kind</a>?</p>
  
  <p>Looking for a complete answer that outlines steps on how to set this up (if possible) with the lowest cost/complexity.</p>