A company is redesigning a static website. The company needs a solution to host the new website in the company's AWS account. The solution must be secure and scalable. Which combination of solutions…

Configuring an Amazon CloudFront distribution with the S3 bucket as its origin provides global content delivery, caching, and edge security, significantly enhancing scalability and performance.

Associating an AWS Certificate Manager (ACM) TLS certificate with the CloudFront distribution encrypts client-CloudFront traffic (HTTPS), fulfilling the security requirement for the website.

Enabling static website hosting on the S3 bucket makes it publicly accessible via an S3 website endpoint, which is less secure than using CloudFront with an Origin Access Control (OAC) or Origin Access Identity (OAI) for private bucket access.

Creating an Amazon S3 bucket is the foundational step for storing all static website content, offering a highly durable and scalable backend for CloudFront.

AWS Certificate Manager (ACM) certificates cannot be exported from ACM; they are directly integrated with services like CloudFront.

Turning off Block Public Access for the S3 bucket would make its content directly public, which is a security risk; it's best practice to keep Block Public Access enabled and use CloudFront's OAC/OAI to access the bucket privately.