AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 91

Question

A company stores images for a website in an Amazon S3 bucket. The company is using Amazon CloudFront to serve the images to end users. The company recently discovered that the images are being accessed from countries where the company does not have a distribution license. Which actions should the company take to secure the images to limit their distribution? (Choose two.)

Accepted Answer

Correct answer: A, C. The correct answer is A, C. Option A: Update the S3 bucket policy to restrict access to a CloudFront origin access control (OAC). Option C: Add a CloudFront geo restriction deny list of countries where the company lacks a license. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

AWS Certified Security - Specialty SCS-C02 — Question 91