AWS Certified Advanced Networking - Specialty
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A company has an Amazon CloudFront distribution with an Application Load Balancer (ALB) as its origin. A network engineer must ensure that all inbound traffic to the ALB originates exclusively from CloudFront, implementing this restriction at the network layer rather than the application layer.
What is the most operationally efficient solution to meet these requirements?
A
Add an inbound rule to the ALB's security group to allow the AWS managed prefix list for CloudFront.
B
Add an inbound rule to the network ACLs that are associated with the ALB's subnets. Use the AWS managed prefix list for CloudFront as the source in the rule.
C
Configure CloudFront to add a custom HTTP header to the requests that CloudFront sends to the ALB.
D
Associate an AWS WAF web ACL with the ALB. Configure the AWS WAF rules to allow traffic from the CloudFront IP set. Automatically update the CloudFront IP set by using an AWS Lambda function.