SAP-C02 · Question #692
A medical company is running a REST API on a set of Amazon EC2 instances. The EC2 instances run in an Auto Scaling group behind an Application Load Balancer (ALB). The ALB runs in three public…
The correct answer is A. Store a random string in AWS Secrets Manager. Create an AWS Lambda function for automatic. https://aws.amazon.com/blogs/security/how-to-enhance-amazon-cloudfront-origin-security-with- aws-waf-and-aws-secrets-manager/
Question
A medical company is running a REST API on a set of Amazon EC2 instances. The EC2 instances run in an Auto Scaling group behind an Application Load Balancer (ALB). The ALB runs in three public subnets, and the EC2 instances run in three private subnets. The company has deployed an Amazon CloudFront distribution that has the ALB as the only origin. Which solution should a solutions architect recommend to enhance the origin security?
Options
- AStore a random string in AWS Secrets Manager. Create an AWS Lambda function for automatic
- BCreate an AWS WAF web ACL rule with an IP match condition of the CloudFront service IP
- CStore a random string in AWS Systems Manager Parameter Store. Configure Parameter Store
- DConfigure AWS Shield Advanced Create a security group policy to allow connections from
How the community answered
(50 responses)- A70% (35)
- B4% (2)
- C18% (9)
- D8% (4)
Explanation
https://aws.amazon.com/blogs/security/how-to-enhance-amazon-cloudfront-origin-security-with- aws-waf-and-aws-secrets-manager/
Community Discussion
No community discussion yet for this question.