AWS Certified Solutions Architect - Professional SAP-C02 — Topic 1 Question 205

Question

A company is designing a new website that hosts static content. The website will give users the ability to upload and download large files. According to company requirements, all data must be encrypted in transit and at rest. A solutions architect is building the solution by using Amazon S3 and Amazon CloudFront. Which combination of steps will meet the encryption requirements? (Choose three.)

Accepted Answer

Correct answer: A, C, E. The correct answer is A, C, E. Option A: Turn on S3 server-side encryption for the S3 bucket that the web application uses. Option C: Create a bucket policy that denies any unencrypted operations in the S3 bucket that the web application uses. Option E: Configure redirection of HTTP requests to HTTPS requests in CloudFront. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Solutions Architect - Professional SAP-C02 — Question 205