SAA-C03 · Question #702
A company plans to deploy an application that uses an Amazon CloudFront distribution. The company will set an Application Load Balancer (ALB) as the origin for the distribution. The company wants to…
The correct answer is B. Create a VPC origin for the CloudFront distribution. Set the VPC origin Amazon Resource Name. Creating a CloudFront VPC origin for the Application Load Balancer allows CloudFront to reach the ALB privately inside the VPC (instead of over the public internet). By using the ALB’s ARN as the VPC origin, the ALB can be kept non-public, which ensures users cannot access it…
Question
A company plans to deploy an application that uses an Amazon CloudFront distribution. The company will set an Application Load Balancer (ALB) as the origin for the distribution. The company wants to ensure that users access the ALB only through the CloudFront distribution. The company plans to deploy the solution in a new VPC. Which solution will meet these requirements?
Options
- AConfigure the network ACLs in the subnet where the ALB is deployed to allow inbound traffic only
- BCreate a VPC origin for the CloudFront distribution. Set the VPC origin Amazon Resource Name
- CCreate a security group that allows only inbound traffic from the public IP addresses of the
- DCreate a VPC origin for the CloudFront distribution. Configure an ALB rule. Set the source IP
How the community answered
(42 responses)- A5% (2)
- B74% (31)
- C7% (3)
- D14% (6)
Explanation
Creating a CloudFront VPC origin for the Application Load Balancer allows CloudFront to reach the ALB privately inside the VPC (instead of over the public internet). By using the ALB’s ARN as the VPC origin, the ALB can be kept non-public, which ensures users cannot access it directly and can reach it only through the CloudFront distribution.
Community Discussion
No community discussion yet for this question.