Q14 — AWS SAA-C03 Ch.10

Question 14 of 100 | ← Chapter 10

Q614. A media company uses an Amazon CloudFront distribution to deliver content over the internet. The company wants only premium customers to have access to the media streams and file content. The company stores all content in an Amazon S3 bucket. The company also delivers content on demand to customers for a specific purpose, such as movie rentals or music downloads.Which solution will meet these requirements?

Correct Answer: B. Generate and provide CloudFront signed URLs to premium customers.

Explanation

The solution that will meet the media company's requirements of providing access to premium customers for media streams and file content stored in an Amazon S3 bucket, as well as delivering on-demand content for specific purposes, is: B. Generate and provide CloudFront signed URLs to premium customers. Explanation: Option B suggests generating and providing CloudFront signed URLs to premium customers. CloudFront signed URLs allow you to control access to your content, enabling you to specify the expiration time, IP address restrictions, and other access conditions. By generating signed URLs, the media company can grant time-limited access to specific content to premium customers only. This ensures that only authorized users can access the media streams and file content. Advantages of this solution include: 1. Access Control: CloudFront signed URLs provide fine-grained control over which customers can access specific content. The media company can generate unique signed URLs for premium customers, limiting access to the content stored in the S3 bucket. 2. Time-Limited Access: Signed URLs can have an expiration time, allowing the media company to control the duration of access to the content. This is particularly useful for on-demand content delivery, such as movie rentals or music downloads, as the access can be limited to the rental period. 3. Security: CloudFront signed URLs use cryptographic signatures to ensure the integrity and authenticity of the URL. This prevents tampering or unauthorized access to the content. Compared to the other options, option B provides the most suitable solution for meeting the requirements: A. Generating and providing S3 signed cookies: While S3 signed cookies can provide access control to S3 objects, they may not be the most appropriate solution for delivering media streams and on-demand content. CloudFront signed URLs offer more flexibility and control over content access. C. Using origin access control (OAC): Origin Access Control (OAC) is used to restrict access to the origin (S3 bucket) based on CloudFront distributions. However, it does not provide the granularity and flexibility required to limit access to specific content for premium customers. D. Generating and activating field-level encryption: Field-level encryption is primarily used for protecting specific fields within a web form, not for providing access control to media streams or file content. In summary, to meet the media company's requirements of providing access to premium customers for media streams and file content, as well as delivering on-demand content, the recommended solution is to generate and provide CloudFront signed URLs to premium customers (Option B). This approach offers access control, time-limited access, and security for the content stored in the Amazon S3 bucket.