Which steps should the business take to safeguard the photographs and restrict their distribution?

A business stores website images in an Amazon S3 bucket. The firm serves the photos to end users through Amazon CloudFront. The firm learned lately that the photographs are being accessible from nations in which it does not have a distribution license.

Which steps should the business take to safeguard the photographs and restrict their distribution? (Select two.)
A . Update the S3 bucket policy to restrict access to a CloudFront origin access identity (OAI).
B . Update the website DNS record to use an Amazon Route 53 geolocation record deny list of countries where the company lacks a license.
C . Add a CloudFront geo restriction deny list of countries where the company lacks a license.
D . Update the S3 bucket policy with a deny list of countries where the company lacks a license.
E . Enable the Restrict Viewer Access option in CloudFront to create a deny list of countries where the company lacks a license.

View Answer

Answer: A C

Explanation:

For Enable Geo-Restriction, choose Yes. For Restriction Type, choose Whitelist to allow access to certain countries, or choose Blacklist to block access from certain countries. https://IAM.amazon.com/premiumsupport/knowledge-center/cloudfront-geo-restriction/