A company needs to improve the security of its web-based application on AWS. The application uses Amazon CloudFront with two custom origins. The first custom origin routes requests to an Amazon API Gateway HTTP API. The second custom origin routes traffic to an Application Load Balancer (ALB). The application integrates with an OpenID Connect (OIDC) identity provider (IdP) for user management. A security audit shows that a JSON Web Token (JWT) authorizer provides access to the API. The security audit also shows that the ALB accepts requests from unauthenticated users. A solutions architect must design a solution to ensure that all backend services respond to only authenticated users. Which solution will meet this requirement?

Question

Accepted Answer

A. Configure the ALB to enforce authentication and authorization by integrating the ALB with the IdP.

Answer

B. Modify the CloudFront configuration to use signed URLs. Implement a permissive signing policy

Answer

C. Create an AWS WAF web ACL that filters out unauthenticated requests at the ALB level. Allow

Answer

D. Enable AWS CloudTrail to log all requests that come to the ALB. Create an AWS Lambda

A company needs to improve the security of its web-based application on AWS. The application uses Amazon CloudFront with two custom origins. The first custom origin routes requests to an Amazon API…

Question

Options

How the community answered

Explanation

Community Discussion