CloudFront and Global Accelerator

Question 1

What is OAI?

Answer 1

OAI = Origin Access Identity. It allows CloudFront to have access to a S3 bucket without needing to make the bucket public

Question 2

Can CloudFront point to EC2 or ALB?

Answer 2

Only if they’re public

Question 3

Can CloudFront and Global Accelerator forward UDP requests?

Answer 3

Only Global Accelarator supports UDP, CloudFront don’t

Question 4

Can you specify a NACL for a CloudFront distribution?

Answer 4

No, because CloudFront delivers content from edge locations, so it’s outside of your VPC

Question 5

Can you integrate Cognito User Pools with CloudFront?

Answer 5

Not directly, you need to develop a Lambda@Edge for it