Ultimate access to all questions.
A company has an Amazon CloudFront distribution with an Application Load Balancer (ALB) as its origin. A network engineer must ensure that all inbound traffic to the ALB originates exclusively from CloudFront, implementing this restriction at the network layer rather than the application layer.
What is the most operationally efficient solution to meet these requirements?