SAA-C03 Q88 · Security

Question

A global media streaming company is migrating its user authentication and content delivery services to AWS. The company wants to use Amazon API Gateway for user authentication and authorization. The company needs a solution that restricts API access to AWS Regions in the United States and ensures minimal latency. Which solution will meet these requirements?

Accepted Answer

**Answer A is correct for two critical reasons:**

1. **API Gateway REST API supports AWS WAF integration**: This is the most important distinction. AWS WAF can only be associated with API Gateway **REST APIs** (not HTTP APIs). This immediately eliminates options B and D.

2. **AWS WAF firewall configured in the same Region**: AWS WAF is a regional service when protecting regional resources like API Gateway REST APIs. The WAF web ACL must be in the **same Region** as the API Gateway it protects. This eliminates option C.

3. **AWS WAF geographic match rules**: WAF supports geo-match conditions that can identify the originating country/region of requests. You can create rules to BLOCK requests from countries outside the United States, effectively restricting API access geographically.

4. *

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips