A media company is using Amazon CloudFront to serve high-value video content. They want to ensure that only authorized viewers can access the content, and the authorization should be checked for every single request at the edge. Which solution is most appropriate?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: CloudFront with Lambda@Edge (or CloudFront Functions) for token validation

Lambda@Edge allows you to run code at the edge PoPs to perform authentication and authorization logic for every request before content is served from the cache....

📋Part of AWS Certified Solutions Architect – Professional (SAP-C02) · AWS Certification Practice
Real Exam ScenarioAmazon CloudFront

A media company is using Amazon CloudFront to serve high-value video content. They want to ensure that only authorized viewers can access the content, and the authorization should be checked for every single request at the edge. Which solution is most appropriate?

✓ Correct Answer & ExplanationAmazon CloudFront

Correct Answer

CloudFront with Lambda@Edge (or CloudFront Functions) for token validation

Why This Answer Is Correct

Lambda@Edge allows you to run code at the edge PoPs to perform authentication and authorization logic for every request before content is served from the cache.

📚 What This Question Tests

This question evaluates your knowledge of Amazon CloudFront — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon CloudFront is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.