In Response to the Past DDoS Attack Experiences, a Security

question 186

Multiple Choice

In response to the past DDoS attack experiences, a Security Engineer has set up an Amazon CloudFront distribution for an Amazon S3 bucket. There is concern that some users may bypass the CloudFront distribution and access the S3 bucket directly. What must be done to prevent users from accessing the S3 objects directly by using URLs?

• A) Change the S3 bucket/object permission so that only the bucket owner has access.
• B) Set up a CloudFront origin access identity (OAI), and change the S3 bucket/object permission so that only the OAI has access.
• C) Create IAM roles for CloudFront, and change the S3 bucket/object permission so that only the IAM role has access.
• D) Redirect S3 bucket access to the corresponding CloudFront distribution.

---

Definitions:

Coelomic Fluid

A fluid found within the coelom, the body cavity of most animals, that serves various functions including circulation and the provision of a hydrostatic skeleton.

Mesoderm

The middle layer of an embryo in multicellular organisms, giving rise to muscles, bones, and the circulatory system among other structures.

Water-Vascular System

A network of hydraulic canals unique to echinoderms, such as starfish, used for locomotion, feeding, and respiration.

Exoskeleton

External skeleton of some invertebrates; hard external parts that muscles attach to and move.