SOA-C02 Question 245
Select 3A company is hosting a static website on Amazon S3 and wants to ensure fast content delivery to users across the globe. They also want to use a custom domain name (e.g., www.example.com) and secure the site with HTTPS. Which steps should the SysOps Administrator take to achieve this?
- A
Configure an Amazon CloudFront distribution, set the S3 bucket as the origin, and enable HTTPS.
- B
Create a Route 53 hosted zone for the custom domain and set up a CNAME record pointing to the CloudFront distribution.
- C
Enable static website hosting on the S3 bucket and configure DNS in Route 53 to point directly to the S3 bucket endpoint.
- D
Request an SSL/TLS certificate using AWS Certificate Manager (ACM) for the custom domain and attach it to the CloudFront distribution.
- E
Set up an Elastic Load Balancer (ELB) in front of the S3 bucket for HTTPS support and configure Route 53 to point to the ELB.
Show answer and explanation
Correct answers: A, B, D
Explanation
To deliver static website content globally with HTTPS using a custom domain, you need to use Amazon CloudFront as a content delivery network and secure the site with an SSL/TLS certificate from AWS Certificate Manager. Route 53 is used to configure the custom domain to point to the CloudFront distribution. S3 static website hosting alone does not support HTTPS with custom domains, and Elastic Load Balancers are not required for this scenario.
- A. Correct.
Correct. Amazon CloudFront is a global content delivery network (CDN) that can serve content from Amazon S3 buckets efficiently and supports HTTPS. Configuring it with the S3 bucket as the origin is a key step.
- B. Correct.
Correct. To use a custom domain, you need to create a CNAME record in Route 53 that points to the CloudFront distribution's domain name.
- C. Incorrect.
Incorrect. While enabling static website hosting on S3 allows you to serve content, S3 does not natively support HTTPS with custom domains. For HTTPS, you must use CloudFront.
- D. Correct.
Correct. AWS Certificate Manager (ACM) provides free SSL/TLS certificates, which can be used to secure the custom domain when attached to the CloudFront distribution.
- E. Incorrect.
Incorrect. Elastic Load Balancers are not needed when serving static content from S3. CloudFront provides HTTPS support and caching, making ELB unnecessary for this use case.