
Ultimate access to all questions.
A company runs a web application on Amazon EC2 instances behind an Application Load Balancer (ALB), which serves as the origin for an Amazon CloudFront distribution. The company aims to implement a custom authentication system to issue tokens for authenticated customers. The web application must verify that GET/POST requests originate from authenticated customers before serving content.
What is the MOST operationally efficient solution that allows the web application to identify authorized customers?
A
Use the ALB to inspect the authorized token inside the GET/POST request payload. Use an AWS Lambda function to insert a customized header to inform the web application of an authenticated customer request.
B
Integrate AWS WAF with the ALB to inspect the authorized token inside the GET/POST request payload. Configure the ALB listener to insert a customized header to inform the web application of an authenticated customer request.
C
Use an AWS Lambda@Edge function to inspect the authorized token inside the GET/POST request payload. Use the Lambda@Edge function also to insert a customized header to inform the web application of an authenticated customer request.
D
Set up an EC2 instance that has a third-party packet inspection tool to inspect the authorized token inside the GET/POST request payload. Configure the tool to insert a customized header to inform the web application of an authenticated customer request.