SOA-C02 Question 248
Select 3A company is hosting a static website on Amazon S3 and wants to use a custom domain name (e.g., www.example.com) for the website. Additionally, the company wants to use HTTPS for secure connections. Which steps should the SysOps Administrator take to achieve this?
- A
Create an Amazon S3 bucket with a name matching the custom domain (e.g., www.example.com) and enable static website hosting.
- B
Request a public certificate for the custom domain using AWS Certificate Manager (ACM).
- C
Configure an Amazon Route 53 hosted zone for the domain and create an alias record pointing to the S3 bucket's website endpoint.
- D
Use AWS CloudFront to create a distribution, configure the S3 bucket as the origin, and associate the ACM certificate with the distribution.
- E
Enable server-side encryption on the S3 bucket to support HTTPS.
Show answer and explanation
Correct answers: A, B, D
Explanation
To serve a static website from S3 using a custom domain with HTTPS, the S3 bucket must match the domain name and be configured for static website hosting. An ACM certificate is required for HTTPS, and AWS CloudFront must be used as the distribution layer to serve the content securely. Route 53 should be configured to point to the CloudFront distribution, not directly to the S3 bucket, to enable HTTPS.
- A. Correct.
Correct: To use a custom domain with an S3-hosted static website, the S3 bucket must be named after the custom domain and static website hosting must be enabled.
- B. Correct.
Correct: An AWS Certificate Manager (ACM) certificate is required to use HTTPS with a custom domain.
- C. Incorrect.
Incorrect: Route 53 should not point directly to an S3 bucket's website endpoint for HTTPS. Instead, Route 53 should point to a CloudFront distribution.
- D. Correct.
Correct: AWS CloudFront is used to enable HTTPS for an S3 static website. The ACM certificate should be attached to the CloudFront distribution.
- E. Incorrect.
Incorrect: Enabling server-side encryption on the S3 bucket is unrelated to supporting HTTPS for a static website.