Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Associate · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The requirement is for the website traffic to be inspected by WAF, not to ensure that the S3 bucket is only accessible through CloudFront. Hence, I say B
Using OAI for CloudFront is the most suitable option here.
option D is correct This is the correct approach because it ensures that the S3 bucket is only accessible through CloudFront, and AWS WAF can inspect all incoming traffic to the CloudFront distribution. why option B is incorrect because AWS WAF is integrated with CloudFront at the edge locations. CloudFront does not forward requests to AWS WAF; instead, AWS WAF inspects the requests as they come into CloudFront