Exam AWS Certified Security - Specialty topic 1 question 74 discussion

Agreed, B is correct https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html

To prevent users from accessing the S3 objects directly by using URLs, you can set up a CloudFront origin access identity (OAI), and change the S3 bucket/object permission so that only the OAI has access. This way, when your users access your Amazon S3 objects using CloudFront URLs, the CloudFront origin access identity gets the objects on your users’ behalf. If your users try to access objects using Amazon S3 URLs, they’re denied access. B

An another input is that AWS no longer proposes OAI, Origin Access Control (OAC) instead. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html#migrate-from-oai-to-oac

B - OAI is the correct

Option B.

OIA Origin access Identity will protect other users from accessing direct bucket URLs.

Cloudfront OIA strictly restrict the access via S3 bucket endpoint.

B is correct

Agreed, B is correct

Ans: B 100%

Ans > B

Ans (B) Restrict access using Origin Access Identity to s3 bucket. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html

B, for sure.

B is right.

B is orrect

B is correct

B is d answer