Serving Confidential Training Videos with CloudFront and S3

Serving Content from S3 with CloudFront: Confidential Video Distribution

Prev Question Next Question

You are building a system to distribute confidential training videos to employees.

Using CloudFront, what method could be used to serve content stored in S3, but not publicly accessible from S3 directly?

A. Create an Origin Access Identity (OAI) for CloudFront and grant access to the objects in your S3 bucket to that OAI.

B. Add the CloudFront account security group“amazon-cf/amazon-cf-sg” to the appropriate S3 bucket policy.

C. Create an Identity and Access Management (IAM) User for CloudFront and grant access to the objects in your S3 bucket to that IAM User.

D. Create an S3 bucket policy that lists the CloudFront distribution ID as the Principal and the target bucket as the Amazon Resource Name (ARN).

Click on the arrows to vote for the correct answer

A. B. C. D.

Prev Question Next Question