SAA-C03 Q649 · Security

Question

A media company uses an Amazon CloudFront distribution to deliver content over the internet. The company wants only premium customers to have access to the media streams and file content. The company stores all content in an Amazon S3 bucket. The company also delivers content on demand to customers for a specific purpose, such as movie rentals or music downloads. Which solution will meet these requirements?

Accepted Answer

**CloudFront signed URLs** are the correct solution because they satisfy every requirement in the question:

1. **Premium-only access**: Signed URLs allow the company to generate time-limited, authenticated URLs that are given only to premium customers. Without a valid signature, no one can access the content.

2. **Content delivered via CloudFront**: The question explicitly states content is delivered through a CloudFront distribution. CloudFront signed URLs are purpose-built for controlling access to CloudFront-distributed content.

3. **On-demand individual content (movie rentals, music downloads)**: This is the critical detail. Signed URLs are ideal when you want to restrict access to **individual files**. Each movie rental or music download gets its own unique signed URL. This gives p

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips