Amazon
SOA-C02 · Question #226
An Amazon CloudFront distribution has a single Amazon S3 bucket as its origin. A SysOps administrator must ensure that users can access the S3 bucket only through requests from the CloudFront…
The correct answer is C. Create an origin access identity (OAI). Assign the OAI to the CloudFront distribution. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content- restricting-access-to-s3.html
Submitted by viktor_hu· Mar 30, 2026Security and Compliance
Question
An Amazon CloudFront distribution has a single Amazon S3 bucket as its origin. A SysOps administrator must ensure that users can access the S3 bucket only through requests from the CloudFront endpoint. Which solution will meet these requirements?
Options
- AConfigure S3 Block Public Access on the S3 bucket.
- BConfigure Origin Shield in the CloudFront distribution.
- CCreate an origin access identity (OAI). Assign the OAI to the CloudFront distribution.
- DCreate an origin access identity (OAI). Assign the OAI to the S3 bucket.
How the community answered
(30 responses)- A7% (2)
- B17% (5)
- C73% (22)
- D3% (1)
Explanation
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content- restricting-access-to-s3.html
Topics
#CloudFront OAI#S3 bucket access control#origin access identity#content delivery security
Community Discussion
No community discussion yet for this question.