[nthj]

Or, if you really want or need a dynamic website, throw CloudFront or similar in front of the site.

Then lock down your CMS at a secret, SSL-only URL.

It's about 2 lines of Ruby or PHP to ping CloudFront and request an invalidation when you change a page (which only happens rarely anyway.)

Secure, fast, dynamic, only goes down if CloudFront does.