A media company is streaming high-definition video globally using Amazon CloudFront. They want to prevent 'Link Leeches' from downloading their videos by ensuring that every request originates from their official domain. Which WAF feature should they use?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: WAF 'Referer' header validation using a custom rule

A WAF rule checking the 'Referer' header can block requests that don't come from your authorized website, helping prevent hotlinking....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon CloudFront

A media company is streaming high-definition video globally using Amazon CloudFront. They want to prevent 'Link Leeches' from downloading their videos by ensuring that every request originates from their official domain. Which WAF feature should they use?

✓ Correct Answer & ExplanationAmazon CloudFront

Correct Answer

WAF 'Referer' header validation using a custom rule

Why This Answer Is Correct

A WAF rule checking the 'Referer' header can block requests that don't come from your authorized website, helping prevent hotlinking.

📚 What This Question Tests

This question evaluates your knowledge of Amazon CloudFront — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon CloudFront is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.