AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A global video streaming company uses Amazon CloudFront as a content distribution network (CDN). The company wants to roll out content in a phased manner across multiple countries. The company needs to ensure that viewers who are outside the countries to which the company rolls out content are not able to view the content.
Which solution will meet these requirements?
Other
Community
UAnonymous
A
Add geographic restrictions to the content in CloudFront by using an allow list. Set up a custom error message.
B
Set up a new URL for restricted content. Authorize access by using a signed URL and cookies. Set up a custom error message.
C
Encrypt the data for the content that the company distributes. Set up a custom error message.
D
Create a new URL for restricted content. Set up a time-restricted access policy for signed URLs.
Explanation:
Explanation
Correct Answer: A
Why Option A is correct:
- Geographic Restrictions: CloudFront provides built-in geographic restriction capabilities that allow you to allow or block viewers in specific countries from accessing your content.
- Allow List: The company can create an allow list of countries where content should be accessible, which perfectly matches the requirement of phased rollout across multiple countries.
- Custom Error Message: Setting up a custom error message provides a better user experience for viewers who are blocked from accessing the content.
- Direct Solution: This is the most straightforward and native AWS solution for geographic content restriction.
Why other options are incorrect:
Option B (Signed URLs/Cookies):
- Signed URLs and cookies are primarily for controlling access based on authentication, not geographic location.
- They don't inherently restrict access by country.
- This solution adds unnecessary complexity for geographic restrictions.
Option C (Encryption):
- Encryption protects data confidentiality but doesn't control geographic access.
- Anyone with the decryption key (including viewers outside target countries) could access the content.
- This doesn't meet the geographic restriction requirement.
Option D (Time-restricted signed URLs):
- Time restrictions control when content can be accessed, not where it can be accessed.
- This doesn't address the geographic restriction requirement.
- Similar to Option B, it adds unnecessary complexity.
Key AWS Service Features:
- CloudFront Geographic Restrictions: Allows you to restrict content distribution by country using either an allow list (whitelist) or block list (blacklist).
- Custom Error Pages: CloudFront lets you configure custom error responses for different HTTP status codes.
Best Practice: For phased geographic rollouts, using CloudFront's built-in geographic restrictions with an allow list is the most efficient and cost-effective solution.
Comments
Loading comments...