A company wants to improve the resiliency and availability of its static website hosted on Amazon S3. The website experiences occasional origin availability issues during regional outages. Which two configurations should a solutions architect implement to build a resilient content delivery solution? (Select TWO.)
- Configure a CloudFront Origin Group with the primary S3 bucket as the primary origin and an S3 bucket in a different AWS Region as the failover origin.Answer
- Configure CloudFront custom error pages to serve a maintenance page cached at the edge when the origin returns a 503 Service Unavailable error.Answer
- CConfigure Amazon Route 53 latency-based routing to redirect requests from the CloudFront edge caches to the secondary S3 bucket during origin outages.
- DSet the Minimum TTL, Maximum TTL, and Default TTL to 0 in the CloudFront cache behavior to bypass edge caching and verify origin health on every request.
- EDeploy AWS Shield Standard on the S3 origin bucket to inspect and block Layer 7 application-specific exploits that might cause origin downtime.
Answer
To build a resilient content delivery solution, the solutions architect should configure a CloudFront Origin Group with primary and secondary S3 buckets in different regions, and configure CloudFront custom error pages to serve a cached maintenance page during origin outages.
Configuring a CloudFront Origin Group provides automatic failover capability between a primary S3 bucket and a failover S3 bucket in a different region. Combining this with CloudFront custom error pages ensures that even if both origins fail or during transition periods, a friendly, cached maintenance page is served directly from edge locations, optimizing availability and user experience.
Step-by-Step Solution
Key Concept
Leveraging CloudFront Origin Groups and Custom Error Pages to build resilient content delivery architectures that survive regional S3 origin outages.
Estimated Time:1m 30s