AmazonAmazon
SAA-C03 · Question #638
SAA-C03 Question #638: Real Exam Question with Answer & Explanation
Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #638. The question stem and answer options stay visible for context.
Submitted by tarun92· Mar 4, 2026Design Secure Architectures
Question
A company is developing a file-sharing application that stores files an Amazon S3 bucket. The company wants to serve all the files through an Amazon CloudFront distribution. The company does not want the files to be accessible through direct navigation to the S3 bucket URL. Which solution will meet these requirements?
Options
- ACreate an S3 bucket policy that grants read permissions to CloudFront.
- BCreate an IAM user. Grant the IAM user read permissions for objects in the S3 bucket. Assign the
- CWrite an S3 bucket policy that assigns the CloudFront distribution ID as the principal and assigns
- DCreate an origin access control (OAC). Assign the OAC to the CloudFront distribution. Configure
Unlock SAA-C03 to see the answer
You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.