AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 107

Question

An Amazon CloudFront distribution has a single Amazon S3 bucket as its origin. A SysOps administrator must ensure that users can access the S3 bucket only through requests from the CloudFront endpoint. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create an origin access identity (OAI). Assign the OAI to the CloudFront distribution. Update the S3 bucket policy to restrict access to the OAI. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 107