AWS SAP-C02 · Question 48 · Domain 2.5: Performance
A media streaming company stores petabytes of video files in Amazon S3. They use Amazon CloudFront to deliver the content globally. To protect their content, they want to ensure that users can only access the videos if they have a valid subscription. The authorization logic is complex, requires querying an external database, and must be executed as close to the user as possible to minimize latency. Which solution meets these requirements?
Answer options:
Use Lambda@Edge triggered by the CloudFront viewer request event to execute the authorization logic.
Use CloudFront signed URLs generated by the application backend.
Use AWS WAF attached to CloudFront with a custom rule to query the external database.
Use CloudFront Functions triggered by the viewer request event.
75 questions · hints · full answers · grading