Correct Answer: Use Origin Access Control (OAC) or Origin Access Identity (OAI)
OAC/OAI allows CloudFront to authenticate with the private S3 bucket, preventing direct public access to S3....
Correct Answer
Use Origin Access Control (OAC) or Origin Access Identity (OAI)
Why This Answer Is Correct
OAC/OAI allows CloudFront to authenticate with the private S3 bucket, preventing direct public access to S3.
This question evaluates your knowledge of Amazon CloudFront — a core concept tested in AWS Certified Solutions Architect – Associate (SAA-C03). Understanding Amazon CloudFront is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?
What is the purpose of 'Field-Level Encryption' in Amazon CloudFront?
An architect needs to run custom code at the CloudFront edge locations to personalize content for different user devices. Which two services can be used?
What is 'Cache Invalidation' in the context of CloudFront?
To improve the cache hit ratio for a CloudFront distribution that serves dynamic content, which strategy should be used?