A company hosts a media portal on AWS that serves high-traffic static images and video clips. The static assets are stored in an Amazon S3 bucket in the us-east-1 Region. To ensure maximum availability, the company replicates these assets to another S3 bucket in the us-west-2 Region. The company wants to implement a solution that caches content globally to reduce latency for users. The architecture must automatically serve assets from the backup Region if the primary S3 bucket returns server errors (HTTP 500-class). Additionally, the portal must be protected against application-layer (Layer 7) HTTP flood attacks. The solution should minimize latency and operational overhead.
Which combination of actions should a solutions architect take to meet these requirements? (Select two.)
- Create an Amazon CloudFront distribution. Configure a CloudFront origin group with the primary S3 bucket as the primary origin and the backup S3 bucket as the secondary origin, setting the failover criteria to include HTTP status codes 500, 502, 503, and 504.Cevap
- Create an AWS WAF web ACL with a rate-based rule to limit requests from individual client IP addresses. Associate the web ACL with the CloudFront distribution.Cevap
- CConfigure Amazon Route 53 latency-based routing with health checks to resolve the portal's domain name directly to the S3 website endpoints in both Regions, allowing clients to fail over during disruptions.
- DEnable AWS Shield Standard on the S3 buckets to mitigate Layer 7 HTTP flood attacks, and configure Route 53 failover routing to point to the backup S3 bucket when the primary S3 bucket is unavailable.
- EDeploy AWS Global Accelerator to route user traffic to the S3 buckets, and use Route 53 latency-based routing to switch traffic to the backup S3 bucket in the event of an outage.