AWS Certified Solutions Architect – Associate (SAA-C03) — Question 333

A company is building a mobile app on AWS. The company wants to expand its reach to millions of users. The company needs to build a platform so that authorized users can watch the company’s content on their mobile devices.

What should a solutions architect recommend to meet these requirements?

Answer options

• A. Publish content to a public Amazon S3 bucket. Use AWS Key Management Service (AWS KMS) keys to stream content.
• B. Set up IPsec VPN between the mobile app and the AWS environment to stream content.
• C. Use Amazon CloudFront. Provide signed URLs to stream content.
• D. Set up AWS Client VPN between the mobile app and the AWS environment to stream content.

Correct answer: C

Explanation

Amazon CloudFront is designed to scale globally to support millions of users, and using signed URLs allows the company to restrict access so only authorized users can stream the content. Implementing VPN solutions is not scalable or suitable for streaming public-facing media to millions of mobile clients. Storing content in a public Amazon S3 bucket does not secure the streaming process effectively, and AWS KMS is not used directly for streaming authorization in this manner.