A company has proprietary data available by using an Amazon CloudFront distribution. The company needs to ensure that the distribution is accessible by only users from the corporate office that have…

Question

Options

• ACreate a new regex pattern set. Add the regex pattern set to a new rule group. Create a new web
• BCreate an AWS WAF IP address set that matches the corporate office IP address range. Create a
• CCreate a new regex pattern set. Add the regex pattern set to a new rule group. Set the default
• DCreate a WAF IP address set that matches the corporate office IP address range. Set the default

• A
  3% (1)
• B
  10% (3)
• C
  6% (2)
• D
  81% (25)

Explanation

WAF IP address set: By creating a WAF IP address set that matches the known IP address ranges of the corporate office, you can explicitly allow only those IPs to access the distribution. Set the default action to Block on the existing web ACL and add a high-priority rule (priority 0) to allow traffic from the corporate IP address set. This configuration will block all traffic by default, except traffic coming from the allowed corporate IP range.

No community discussion yet for this question.