AWS Certified Solution Architect – Associate

Set · SAA-C01 V15.35

You are building a system to distribute confidential training videos to employees. Using cloud front, what method could be used to serve content that is stored in S3, but not publically accessible from S3 directly?

Select oneAdd the CloudFront account security group "amazon-ct/amazon-cf-sg" to the appropriate S3 bucket policyCreate an Origin Access identity for CLoudFront and grant access to the objects in your S3 bucket to that OAICreate an identity and Access Amangeement User for CloudFornt and grant Access to the objects in your S3 bucket to that IAM userCreate a S3 bucket policy that lists the Cloudfront distribution ID as the Principle and the target as the Amazon Resource Name

Questions & review

CorrectIncorrectUnanswered

Question link

About this exam

The AWS Certified Solutions Architect - Associate practice questions are intended for individuals who perform a solutions architect role and have one or more years of hands-on experience designing available, cost-efficient, fault-tolerant, and scalable distributed systems on AWS.