A company is hosting a static website on Amazon S3 distributed via Amazon CloudFront. The company wants to ensure that users can only access the website through the CloudFront distribution and cannot access the S3 bucket directly via its S3 URL. <br/><br/>What should the solutions architect configure to meet this requirement?

Answer options:

Configure Origin Access Control (OAC) on the CloudFront distribution and update the S3 bucket policy to allow access only from the CloudFront OAC.

Create an IAM role for CloudFront and attach it to the S3 bucket.

Configure the S3 bucket as a website endpoint and use a custom header in CloudFront to authenticate requests.

Place the S3 bucket in a private VPC subnet and use a VPC endpoint for CloudFront.

How to approach this question

Identify the feature that restricts S3 access to CloudFront.

Full Answer

A.Configure Origin Access Control (OAC) on the CloudFront distribution and update the S3 bucket policy to allow access only from the CloudFront OAC.✓ Correct

Origin Access Control (OAC) is the recommended way to secure Amazon S3 origins. It ensures that users can only access your S3 bucket content through CloudFront, preventing direct access to the S3 URLs.

Common mistakes

Confusing S3 website endpoints with REST API endpoints. OAC only works with S3 REST API endpoints.

Question 12 All questions Question 14

Practice the full AWS SAA-C03 Practice Exam 4

65 questions · hints · full answers · grading

More questions from this exam

Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team wants...Medium Q02An application running on Amazon EC2 instances needs to access an Amazon DynamoDB table. Both res...Easy Q03A company is designing a web application that will be hosted on AWS. The application will use an ...Medium Q04A company is building a mobile app that requires users to authenticate using their social media a...Hard Q05A solutions architect is designing a VPC for a three-tier web application. The database tier must...Medium

View all 65 questions →