SAA-C03 Question 131

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Origin Access Identity is the aws mechanism for restricting an S3 bucket so it can only be accessed through CloudFront, not through direct S3 URLs. You attach the OAI to the CloudFront distribution, then write a bucket policy granting read access only to that OAI

• Chose D1

  OAI's are designed specifically for S3 origins. It helps provide security for CloudFront.

• Chose D4

  C would also work but missing important details in the answer D is legacy and architect should not recommend it