SAA-C03 Q38 · Migration

Question

A financial service company has a two-tier consumer banking application. The frontend serves static web content. The backend consists of APIs. The company needs to migrate the frontend component to AWS. The backend of the application will remain on premises. The company must protect the application from common web vulnerabilities and attacks. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Option B satisfies every requirement with minimal operational overhead:

1. **Static frontend migration**: Amazon S3 is the ideal AWS service for hosting static web content. No servers to manage, no patching, no scaling concerns — it's fully managed.

2. **Backend remains on premises**: CloudFront supports **custom origins**, which can point to any HTTP endpoint, including on-premises servers accessible via the internet. By configuring a second origin with URL-pattern-based routing (called **cache behaviors**), API requests (e.g., `/api/*`) are forwarded to the on-premises backend while static content requests go to S3.

3. **Protection from common web vulnerabilities**: **AWS WAF** integrates natively with CloudFront. You associate WAF WebACL rules directly with the CloudFront distributio

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips