ANS-C01 Question 14
Single answerYou are designing a global web application that delivers video-on-demand content to users worldwide. The application must provide low latency, support HTTPS, and protect against unauthorized access to the videos. Which design pattern involving Amazon CloudFront would best meet these requirements?
- A
Use Amazon CloudFront with an S3 origin configured for public access and enable caching.
- B
Use Amazon CloudFront with an S3 origin configured for private access, enable signed URLs, and enforce HTTPS-only communication.
- C
Use Amazon CloudFront with a custom origin running on Amazon EC2 and enable caching.
- D
Use Amazon CloudFront with an S3 origin configured for private access, but disable HTTPS to avoid performance overhead.
Show answer and explanation
Correct answer: B
Explanation
To meet the requirements of low latency, security, and HTTPS support, Amazon CloudFront should be paired with an S3 origin configured for private access. Signed URLs ensure that only authorized users can access the videos, and enforcing HTTPS ensures secure communication. This is a common design pattern for securely delivering media content using CloudFront.
- A. Incorrect.
Configuring an S3 origin for public access exposes the videos to unauthorized downloads, which does not meet the security requirement.
- B. Correct.
Configuring an S3 origin for private access, using signed URLs, and enforcing HTTPS ensures both low latency, security, and compliance with the HTTPS requirement.
- C. Incorrect.
Using a custom origin on EC2 can work but introduces complexity and higher maintenance overhead compared to using S3 as an origin. This option also does not explicitly address the HTTPS or access control requirements.
- D. Incorrect.
Disabling HTTPS violates the requirement to support HTTPS and compromises the security of the application.