Locking Down /private on a Static Site with Cloudflare Access

My site is a pile of HTML files on S3. There’s no login form, no session cookie, no database — just a CDN edge pushing pre-built pages. That’s the deal with static sites: fast and simple, right up until you want to lock something down.