You want to prevent users from accessing your S3 content directly and force them to go through CloudFront. Which feature should you use?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Origin Access Control (OAC) or Origin Access Identity (OAI)

Origin Access Control (OAC) and Origin Access Identity (OAI) allow you to restrict access to an Amazon S3 bucket so that users can only access content through Amazon CloudFront, pr...

๐Ÿ“‹Part of AWS Certified Cloud Practitioner (CLF-C02) ยท AWS Certification Practice
Real Exam ScenarioAmazon CloudFront

You want to prevent users from accessing your S3 content directly and force them to go through CloudFront. Which feature should you use?

โœ“ Correct Answer & ExplanationAmazon CloudFront

Correct Answer

Origin Access Control (OAC) or Origin Access Identity (OAI)

Why This Answer Is Correct

Origin Access Control (OAC) and Origin Access Identity (OAI) allow you to restrict access to an Amazon S3 bucket so that users can only access content through Amazon CloudFront, preventing direct S3 access.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Amazon CloudFront โ€” a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding Amazon CloudFront is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.