Cloudfront Quiz
A CloudFront distribution is being used to distribute content from an S3 bucket. It is required that only a particular set of users get access to certain content. How can this be accomplished?
A. Create IAM Users for each user and then provide access to the S3 bucket content.
B. Create IAM Groups for each set of users and then provide access to the S3 bucketcontent.
C. Create CloudFront signed URLs and then distribute these URLs to the users.
D. Use IAM Polices for the underlying S3 buckets to restrict content.
C. Create CloudFront signed URLs and then distribute these URLs to the users.
AWS Documentation mentions the following:Many companies that distribute content via the internet want to restrict access to documents, business data, media streams, or content that is intended for selected users, for example, users who have paid a fee. To securely serve this private content using CloudFront, you can do the following:
Require that your users access your private content by using special CloudFront signed URLs or signed cookies.Require that your users access your Amazon S3 content using CloudFront URLs, not Amazon S3 URLs. Requiring CloudFront URLs isn’t required, but we recommend it to prevent users from bypassing the restrictions that you specify in signed URLs or signed cookies.
For more information on serving private content via CloudFront, please visit the following URL:
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html#
