SAA-C03 Q231 · Networking

Question

A company wants to publish a private website for its on-premises employees. The website consists of several HTML pages and image files. The website must be available only through HTTPS and must be available only to on-premises employees. A solutions architect plans to store the website files in an Amazon S3 bucket. Which solution will meet these requirements?

Accepted Answer

This solution meets every requirement systematically:

**Requirement 1: HTTPS only**
- CloudFront natively supports HTTPS and can be configured to redirect HTTP to HTTPS or require HTTPS only
- AWS Certificate Manager (ACM) provides free SSL/TLS certificates for CloudFront distributions
- S3 static website hosting alone does NOT support HTTPS — this is a critical distinction

**Requirement 2: Available only to on-premises employees**
- AWS WAF with an IP set rule allows you to create an allowlist of on-premises public IP addresses
- WAF is attached to the CloudFront distribution, blocking all requests not from the allowed IPs
- This provides network-layer access control at the edge

**Requirement 3: Store files in S3**
- Origin Access Control (OAC) ensures CloudFront is the only entity tha

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips