A Security Administrator Has a Website Hosted in Amazon S3

question 10

Multiple Choice

A Security Administrator has a website hosted in Amazon S3. The Administrator has been given the following requirements: Users may access the website by using an Amazon CloudFront distribution. Users may not access the website directly by using an Amazon S3 URL. Which configurations will support these requirements? (Choose two.)

• A) Associate an origin access identity with the CloudFront distribution.
• B) Implement a "Principal": "cloudfront.amazonaws.com" condition in the S3 bucket policy. Implement a "Principal": "cloudfront.amazonaws.com" condition in the S3 bucket policy.
• C) Modify the S3 bucket permissions so that only the origin access identity can access the bucket contents.
• D) Implement security groups so that the S3 bucket can be accessed only by using the intended CloudFront distribution.
• E) Configure the S3 bucket policy so that it is accessible only through VPC endpoints, and place the CloudFront distribution into the specified VPC.

---

Definitions:

Igneous Rock

A rock that formed by solidification of molten material (magma).

Dietary Supplements

Products taken by mouth that contain dietary ingredients intended to supplement the diet, such as vitamins, minerals, herbs, or amino acids.

Veterinary Drugs

Medications specifically developed for the treatment and prevention of diseases in animals.

Medical Devices

Instruments, machines, or software used in healthcare for the diagnosis, prevention, monitoring, treatment, or alleviation of disease.