AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 165

Question

A solutions architect must design a solution that uses Amazon CloudFront with an Amazon S3 origin to store a static website. The company’s security policy requires that all website traffic be inspected by AWS WAF. How should the solutions architect comply with these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Configure Amazon CloudFront and Amazon S3 to use an origin access identity (OAI) to restrict access to the S3 bucket. Enable AWS WAF on the distribution. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS WAF protects web applications from common exploits and malicious requests.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 165