AWS Certified Solutions Architect - Associate
Get started today
Ultimate access to all questions.
Deep dive into the quiz with AI chat providers.
We prepare a focused prompt with your quiz and certificate details so each AI can offer a more tailored, in-depth explanation.
A media company uses an Amazon CloudFront distribution to deliver content over the internet. The company wants only premium customers to have access to the media streams and file content. The company stores all content in an Amazon S3 bucket. The company also delivers content on demand to customers for a specific purpose, such as movie rentals or music downloads.
Which solution will meet these requirements?
Other
Community
UAnonymous
A
Generate and provide S3 signed cookies to premium customers.
B
Generate and provide CloudFront signed URLs to premium customers.
C
Use origin access control (OAC) to limit the access of non-premium customers.
D
Generate and activate field-level encryption to block non-premium customers.
Explanation:
Explanation
Correct Answer: B - Generate and provide CloudFront signed URLs to premium customers.
Why this is correct:
-
CloudFront signed URLs are specifically designed for content delivery scenarios where you want to restrict access to content through CloudFront distributions.
-
The requirements include:
- Only premium customers should have access
- Content is delivered via CloudFront distribution
- Content stored in S3 bucket
- On-demand delivery for specific purposes (movie rentals, music downloads)
-
CloudFront signed URLs provide:
- Time-limited access (perfect for rentals/downloads)
- Secure access control at the CDN level
- Integration with CloudFront's caching infrastructure
- Ability to restrict access to specific IP addresses, paths, or time periods
Why other options are incorrect:
A. Generate and provide S3 signed cookies to premium customers.
- S3 signed cookies work at the S3 level, not CloudFront level
- This would bypass CloudFront's caching and delivery optimization
- Less suitable for time-limited access scenarios like rentals
C. Use origin access control (OAC) to limit the access of non-premium customers.
- OAC restricts access from CloudFront to S3 origin
- This prevents direct access to S3 but doesn't control which end-users can access CloudFront content
- All users would still be able to access CloudFront content
D. Generate and activate field-level encryption to block non-premium customers.
- Field-level encryption is for encrypting specific form fields in HTTP requests
- Not relevant for restricting access to media streams and file content
- Doesn't address the access control requirement
Key AWS Concepts:
- CloudFront Signed URLs/URLs: Create time-limited URLs that grant access to CloudFront content
- Use Case: Perfect for pay-per-view, rentals, or premium content access
- Integration: Works seamlessly with S3 origins while maintaining CloudFront benefits
- Security: URLs can be generated server-side and provided only to authorized users
Comments
Loading comments...