
Ultimate access to all questions.
Your company is implementing a new media storage solution using Amazon S3 and AWS CloudFront. You need to ensure that the CloudFront distribution has the necessary permissions to access the S3 bucket. Which of the following steps should you take to achieve this?
A
Create an IAM role with full access to all S3 buckets and assign it to the CloudFront distribution.
B
Create an Origin Access Identity (OAI) for the CloudFront distribution and attach the necessary S3 bucket policy to allow access from the OAI.
C
Modify the S3 bucket policy to allow access from the CloudFront service.
D
Use the root account credentials to configure the CloudFront distribution to access the S3 bucket.