AWS Certified Developer – Associate (DVA-C02) — Question 187

A company needs to distribute firmware updates to its customers around the world.

Which service will allow easy and secure control of the access to the downloads at the lowest cost?

Answer options

• A. Use Amazon CloudFront with signed URLs for Amazon S3.
• B. Create a dedicated Amazon CloudFront Distribution for each customer.
• C. Use Amazon CloudFront with AWS Lambda@Edge.
• D. Use Amazon API Gateway and AWS Lambda to control access to an S3 bucket.

Correct answer: A

Explanation

The correct answer is A because using Amazon CloudFront with signed URLs allows for secure, controlled access to S3 content while being cost-effective. Option B is impractical as it requires multiple distributions, which increases costs. Option C may add complexity without directly addressing access control needs, and option D, while functional, may involve higher operational costs compared to the simplicity of using signed URLs with CloudFront.