DOP-C02 · Question #365
A video platform company is migrating its video catalog to AWS. The company will host MP4 videos files in an Amazon S3 bucket. The company will use Amazon CloudFront and Amazon EC2 instances to serve
The correct answer is B. Implement an authorization token check in CloudFront Functions. Enable CloudWatch logging for. CloudFront Functions: Using CloudFront Functions to check the authorization token allows you to perform lightweight, low-latency processing directly at the edge. This is particularly suitable for simple token validation without the overhead of a full Lambda function. CloudWatch L
Question
A video platform company is migrating its video catalog to AWS. The company will host MP4 videos files in an Amazon S3 bucket. The company will use Amazon CloudFront and Amazon EC2 instances to serve the video files. Users first connect to a frontend application that redirects to a video URL. The video URL contains an authorization token in CloudFront. The cache is activated on the CloudFront distribution. Authorization token check activity needs to be logged in Amazon CloudWatch. The company wants to prevent direct access to video files on CloudFront and Amazon S3 and wants to implement checks of the authorization token that the frontend application provides. The company also wants to perform regular rolling updates of the code that checks the authorization token signature. Which solution will meet these requirements with the LEAST operational effort?
Options
- AImplement an authorization token check in Lambda@Edge as a trigger on the CloudFront
- BImplement an authorization token check in CloudFront Functions. Enable CloudWatch logging for
- CImplement an authorization token check in the application code that is installed on the EC2
- DImplement an authorization token check in CloudFront Functions. Enable CloudWatch logging for
How the community answered
(51 responses)- A18% (9)
- B71% (36)
- C8% (4)
- D4% (2)
Explanation
CloudFront Functions: Using CloudFront Functions to check the authorization token allows you to perform lightweight, low-latency processing directly at the edge. This is particularly suitable for simple token validation without the overhead of a full Lambda function. CloudWatch Logging: Enabling CloudWatch logging for the CloudFront function provides visibility into authorization token check activities, meeting the requirement for logging without additional operational effort. Continuous Deployment: Implementing continuous deployment for CloudFront functions allows for seamless updates to the token validation logic without significant downtime or operational
Topics
Community Discussion
No community discussion yet for this question.