CloudFront Flashcards
1
Q
How to enable Cloudfront origin failover?
A
- Create an origin group with two origins: a primary and a secondary.
- If the primary origin is unavailable, or returns specific HTTP response status codes that indicate a failure
- CloudFront automatically switches to the secondary origin.
2
Q
What are the ways CloudFront provides to send authenticated requests to an Amazon S3 origin?
A
- Origin access control (OAC).
- Origin access identity (OAI).
We recommend using OAC because it supports:
- All Amazon S3 buckets in all AWS Regions, including opt-in Regions launched after December 2022
- Amazon S3 server-side encryption with AWS KMS (SSE-KMS)
- Dynamic requests (PUT and DELETE) to Amazon S3
