Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select 3 answers.
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
At rest: Enable S3 server-side encryption (A). In transit: Force HTTPS for users ↔ CloudFront (E) and CloudFront ↔ S3 via bucket policy aws:SecureTransport (C). Ignore ACLs, CloudFront SSE-KMS, and “RequireSSL” (they don’t apply).
BCE You need B to enforce encryption in transit with S3. Other options cannot do that.
just ACE