Exam AWS Certified Security - Specialty topic 1 question 18 discussion

Exam question from Amazon's AWS Certified Security - Specialty

Question #: 18
Topic #: 1

[All AWS Certified Security - Specialty Questions]

A Security Administrator has a website hosted in Amazon S3. The Administrator has been given the following requirements:
✑ Users may access the website by using an Amazon CloudFront distribution.
✑ Users may not access the website directly by using an Amazon S3 URL.
Which configurations will support these requirements? (Choose two.)

A. Associate an origin access identity with the CloudFront distribution.
B. Implement a ג€Principalג€: ג€cloudfront.amazonaws.comג€ condition in the S3 bucket policy.
C. Modify the S3 bucket permissions so that only the origin access identity can access the bucket contents.
D. Implement security groups so that the S3 bucket can be accessed only by using the intended CloudFront distribution.
E. Configure the S3 bucket policy so that it is accessible only through VPC endpoints, and place the CloudFront distribution into the specified VPC.

Show Suggested Answer

Suggested Answer: AC 🗳️

by BillyC at Aug. 25, 2019, 5:20 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

BillyC

Highly Voted 3 years, 11 months ago

A and C

upvoted 19 times

...

donathon

Highly Voted 3 years, 10 months ago

AC B: This does not restrict it just say this policy applies to cloudfront. Too little information to say if this is the answer ot not. D: S3 does not use security groups. E: No way to put Cloudfront into VPC.

upvoted 12 times

...