Question #882

试题更新时间: 2023-11-07 12:59:45

You are building a large-scale confidential documentation web server on AWS and all of the documentation for it will be stored on S3. One of the requirements is that it cannot be publicly accessible from S3 directly, and you will need to use CloudFront to accomplish this. Which of the methods Listed below would satisfy the requirements as outlined? Choose an answer from the options below

A. Create an Identity and Access Management (IAM) user for CloudFront and grant access to the objects in your S3 bucket to that IAM User.

B. Create an Origin Access identity (OAI) for Cloud Front and grant access to the objects in your S3 bucket to that OAl.

C. Create individual policies for each bucket the documents are stored in and in that policy grant access to only CloudFront.

D. Create an S3 bucket policy that lists the CloudFront distribution ID as the Principal and the target bucket as the Amazon Resource Name (ARN).

上一题收藏列表练习记录

下一题点击收藏

问题反馈