ANS-C01 · Question #54
A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin in an Amazon CloudFront distribution. The company wants to implement a…
The correct answer is C. Use an AWS Lambda@Edge function to inspect the authorized token inside the GET/POST. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/edge-functions.html
Question
A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin in an Amazon CloudFront distribution. The company wants to implement a custom authentication system that will provide a token for its authenticated customers. The web application must ensure that the GET/POST requests come from authenticated customers before it delivers the content. A network engineer must design a solution that gives the web application the ability to identify authorized customers. What is the MOST operationally efficient solution that meets these requirements?
Options
- AUse the ALB to inspect the authorized token inside the GET/POST request payload. Use an AWS
- BIntegrate AWS WAF with the ALB to inspect the authorized token inside the GET/POST request
- CUse an AWS Lambda@Edge function to inspect the authorized token inside the GET/POST
- DSet up an EC2 instance that has a third-party packet inspection tool to inspect the authorized
How the community answered
(51 responses)- A22% (11)
- B10% (5)
- C63% (32)
- D6% (3)
Explanation
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/edge-functions.html
Topics
Community Discussion
No community discussion yet for this question.