Security World 4 · Edge Shields · Stage 1

Front Door

Every request should enter through CloudFront: the bucket must refuse everyone else, the load balancer must know who is calling, and the document link must carry a signature.

Origin access control
Custom origin headers
VPC origins
Geo restriction
Signed URLs and cookies
S3 CORS

Domain: Security
World: Security World 4: Edge Shields (Specialty)
Game type: Edge security: Set the CDN, the web firewall and the bucket in front of an application.
Time: About 25 minutes on a first attempt (estimated)
Exam guides: SAA-C03Task 1.2: Design secure workloads and applications
SOA-C03Skill 5.1.3: Audit AWS network protection services in a single account
SCS-C03Skill 3.1.2: Implement appropriate network edge protection (for example, CloudFront headers, AWS WAF, AWS IoT policies, protecting against OWASP Top 10 threats, Amazon S3 cross-origin resource sharing [CORS], Shield Advanced); Skill 3.1.3: Design and implement AWS edge controls and rules based on requirements (for example, geography, geolocation, rate limiting, client fingerprinting)