
Ultimate access to all questions.
As a developer setting up signers who can create signed URLs for Amazon CloudFront distributions, it's crucial to understand the specific criteria and limitations associated with this process. Signed URLs allow you to control access to your content by specifying who can access it and for how long.
Which of the following statements should the developer consider while defining the signers? (Select two)
A
When you create a signer, the public key is with CloudFront and private key is used to sign a portion of URL
B
You can also use AWS Identity and Access Management (IAM) permissions policies to restrict what the root user can do with CloudFront key pairs
C
When you use the root user to manage CloudFront key pairs, you can only have up to two active CloudFront key pairs per AWS account
D
CloudFront key pairs can be created with any account that has administrative permissions and full access to CloudFront resources
E
Both the signers (trusted key groups and CloudFront key pairs) can be managed using the CloudFront APIs