SAA-C03 · Question #86
A company hosts an application on AWS. The application gives users the ability to upload photos and store the photos in an Amazon S3 bucket. The company wants to use Amazon CloudFront and a custom dom
The correct answer is B. Use AWS Certificate Manager (ACM) to create a public certificate in eu-west-1. Use the certificate D. Configure Amazon S3 to allow uploads from CloudFront origin access control (OAC).. To upload photos to an S3 bucket using Amazon CloudFront with a custom domain name, the following components are required: ACM in us-east-1 (Option A): When using CloudFront with HTTPS, the SSL/TLS certificate must be created in the us-east-1 Region. AWS Certificate Manager (ACM)
Question
A company hosts an application on AWS. The application gives users the ability to upload photos and store the photos in an Amazon S3 bucket. The company wants to use Amazon CloudFront and a custom domain name to upload the photo files to the S3 bucket in the eu-west-1 Region. Which solution will meet these requirements? (Select TWO.)
Options
- AUse AWS Certificate Manager (ACM) to create a public certificate in the us-east-1 Region. Use
- BUse AWS Certificate Manager (ACM) to create a public certificate in eu-west-1. Use the certificate
- CConfigure Amazon S3 to allow uploads from CloudFront. Configure S3 Transfer Acceleration.
- DConfigure Amazon S3 to allow uploads from CloudFront origin access control (OAC).
- EConfigure Amazon S3 to allow uploads from CloudFront. Configure an Amazon S3 website
How the community answered
(45 responses)- A4% (2)
- B82% (37)
- C11% (5)
- E2% (1)
Explanation
To upload photos to an S3 bucket using Amazon CloudFront with a custom domain name, the following components are required: ACM in us-east-1 (Option A): When using CloudFront with HTTPS, the SSL/TLS certificate must be created in the us-east-1 Region. AWS Certificate Manager (ACM) handles the provisioning, management, and renewal of public certificates, making this a cost-effective and low- maintenance solution. S3 Transfer Acceleration (Option C): Transfer Acceleration allows faster uploads to S3 from CloudFront by routing traffic through AWS's edge locations. This significantly speeds up the data upload process, especially for users that are geographically distant from the S3 bucket's region. Option B (ACM in eu-west-1): CloudFront only supports certificates created in us-east-1. Option D and E (OAC and website endpoint): These are not ideal for handling secure uploads or efficient data transfers in this case.
Community Discussion
No community discussion yet for this question.