Question

Difficulty: EasyEdge Caching and Content Delivery for Resilient Architectures

A company wants to improve the resiliency and availability of its static website hosted on Amazon S3. The website experiences occasional origin availability issues during regional outages. Which two configurations should a solutions architect implement to build a resilient content delivery solution? (Select TWO.)

  1. Configure a CloudFront Origin Group with the primary S3 bucket as the primary origin and an S3 bucket in a different AWS Region as the failover origin.Answer
  2. Configure CloudFront custom error pages to serve a maintenance page cached at the edge when the origin returns a 503 Service Unavailable error.Answer
  3. C
    Configure Amazon Route 53 latency-based routing to redirect requests from the CloudFront edge caches to the secondary S3 bucket during origin outages.
  4. D
    Set the Minimum TTL, Maximum TTL, and Default TTL to 0 in the CloudFront cache behavior to bypass edge caching and verify origin health on every request.
  5. E
    Deploy AWS Shield Standard on the S3 origin bucket to inspect and block Layer 7 application-specific exploits that might cause origin downtime.

Answer

To build a resilient content delivery solution, the solutions architect should configure a CloudFront Origin Group with primary and secondary S3 buckets in different regions, and configure CloudFront custom error pages to serve a cached maintenance page during origin outages.
Configuring a CloudFront Origin Group provides automatic failover capability between a primary S3 bucket and a failover S3 bucket in a different region. Combining this with CloudFront custom error pages ensures that even if both origins fail or during transition periods, a friendly, cached maintenance page is served directly from edge locations, optimizing availability and user experience.

Step-by-Step Solution

1
Set up multi-region origin redundancy by creating a secondary S3 bucket in another AWS Region and replicating static assets to it.
Two identical sets of static assets exist in different regions.
Ensures a backup origin is available in case the primary region experiences an outage.
2
Create a CloudFront Origin Group containing both the primary S3 bucket and the secondary S3 bucket.
An Origin Group is established with the secondary bucket designated as the failover origin.
Allows CloudFront to automatically redirect requests when the primary origin is unreachable or returns designated error codes.
3
Configure CloudFront custom error pages for HTTP status code 503.
A custom error page pointing to a static maintenance file is cached at edge locations.
Ensures that even during failover transitions or complete origin failures, users receive a friendly cached response directly from the edge.

Key Concept

Leveraging CloudFront Origin Groups and Custom Error Pages to build resilient content delivery architectures that survive regional S3 origin outages.
Estimated Time:1m 30s
Rate this question