AWS Certified Advanced Networking – Specialty (ANS-C00) — Question 123

You need to ensure the files served by your CloudFront distribution are only accessible to authorized users. You hope to serve thousands of users. What two steps should you take? (Choose two.)

Answer options

• A. Configure signed cookies.
• B. Configure a WAF.
• C. Configure a bucket policy restricting the bucket to only CloudFront OAI.
• D. Configure an SSL on the distribution.

Correct answer: A, C

Explanation

The correct actions involve configuring signed cookies (A) to control user access and implementing a bucket policy (C) that restricts access to the bucket for only the CloudFront Origin Access Identity (OAI). While a WAF (B) can offer security, it does not directly restrict file access, and SSL (D) is primarily for securing the connection rather than controlling access.