Topic 1 Question 172
A solutions architect is creating a new Amazon CloudFront distribution for an application. Some of the information submitted by users is sensitive. The application uses HTTPS but needs another layer of security. The sensitive information should.be protected throughout the entire application stack, and access to the information should be restricted to certain applications.
Which action should the solutions architect take?
Configure a CloudFront signed URL.
Configure a CloudFront signed cookie.
Configure a CloudFront field-level encryption profile.
Configure CloudFront and set the Origin Protocol Policy setting to HTTPS Only for the Viewer Protocol Policy.
ユーザの投票
コメント(17)
CCCCCCCCC Field-level encryption allows you to enable your users to securely upload sensitive information to your web servers. The sensitive information provided by your users is encrypted at the edge, close to the user, and remains encrypted throughout your entire application stack. This encryption ensures that only applications that need the data—and have the credentials to decrypt it—are able to do so.
👍 27Bobbybash2022/11/21- 正解だと思う選択肢: B
To protect sensitive information throughout the entire application stack and restrict access to certain applications, the solutions architect should configure a CloudFront signed cookie (Option B).
CloudFront signed cookies are a feature of CloudFront that allows you to limit access to content in your distribution by requiring users to present a valid cookie with a signed value. By creating a signed cookie and requiring users to present the cookie in order to access the content, you can restrict access to the content to only those users who have a valid cookie. This can help protect sensitive information throughout the entire application stack and ensure that only authorized applications have access to the information.
👍 3Buruguduystunstugudunstuy2022/12/22 - 正解だと思う選択肢: C
C! CloudFront’s field-level encryption further encrypts sensitive data in an HTTPS form using field-specific encryption keys (which you supply) before a POST request is forwarded to your origin. This ensures that sensitive data can only be decrypted and viewed by certain components or services in your application stack. https://aws.amazon.com/about-aws/whats-new/2017/12/introducing-field-level-encryption-on-amazon-cloudfront/
👍 3HayLLlHuK2023/01/04
シャッフルモード