AWS Certified Solutions Architect – Associate (SAA-C03) — Question 583

A company uses AWS and sells access to copyrighted images. The company’s global customer base needs to be able to access these images quickly. The company must deny access to users from specific countries. The company wants to minimize costs as much as possible.

Which solution will meet these requirements?

Answer options

• A. Use Amazon S3 to store the images. Turn on multi-factor authentication (MFA) and public bucket access. Provide customers with a link to the S3 bucket.
• B. Use Amazon S3 to store the images. Create an IAM user for each customer. Add the users to a group that has permission to access the S3 bucket.
• C. Use Amazon EC2 instances that are behind Application Load Balancers (ALBs) to store the images. Deploy the instances only in the countries the company services. Provide customers with links to the ALBs for their specific country's instances.
• D. Use Amazon S3 to store the images. Use Amazon CloudFront to distribute the images with geographic restrictions. Provide a signed URL for each customer to access the data in CloudFront.

Correct answer: D

Explanation

Amazon CloudFront provides low-latency global content delivery and built-in geographic restriction capabilities to block specific countries, while S3 paired with CloudFront signed URLs ensures secure, cost-effective access to copyrighted images. Other options are incorrect because public S3 buckets do not restrict access, managing individual IAM users for all customers is not scalable, and deploying EC2 instances behind ALBs in multiple countries is highly expensive and complex compared to using a CDN.