Examkin

Soru

Zorluk: ZorHigh-Performing Content Delivery and Caching Solutions

A medical diagnostics company has deployed a global imaging application on AWS. The application stores high-resolution digital scans in an Amazon S3 bucket. Medical personnel globally access these scans frequently within 48 hours of creation, after which access drops significantly. The scans must be delivered with the lowest possible latency and maximum security. The company must ensure that only authorized clinicians can access the scans, and wants to minimize requests to the S3 origin.

Which combination of actions should a Solutions Architect take to meet these requirements? (Select TWO.)

  1. Configure an Amazon CloudFront distribution with the S3 bucket as the origin, and restrict bucket access using Origin Access Control (OAC).Cevap
  2. Use CloudFront signed URLs or signed cookies to authorize client access to the scans, and configure a custom cache policy with a default TTL of 172,800 seconds.Cevap
  3. C
    Configure a CloudFront cache behavior with a Minimum TTL, Default TTL, and Maximum TTL set to 0 to ensure that scanned images are dynamically validated against the origin S3 bucket on every request.
  4. D
    Configure an Amazon S3 Lifecycle rule to transition all scanned images to the Amazon S3 Standard-Infrequent Access (S3 Standard-IA) storage class immediately upon upload.
  5. E
    Configure the EC2 application instances in private subnets to retrieve the scans from the S3 bucket via NAT Gateways, bypassing the need for a CDN.

Cevap

Configure an Amazon CloudFront distribution with the S3 bucket as the origin, restrict bucket access using Origin Access Control (OAC), and use CloudFront signed URLs or signed cookies to authorize client access to the scans while configuring a custom cache policy with a default TTL of 172,800 seconds.
The correct solution involves configuring an Amazon CloudFront distribution with Origin Access Control (OAC) to restrict access to the underlying S3 bucket, ensuring users cannot bypass the CDN. Access authorization is handled at the edge using CloudFront signed URLs or signed cookies, while a default TTL of 172,800 seconds (48 hours) keeps the files cached during their high-access window, reducing latency and S3 origin requests.

Adım Adım Çözüm

1
Analyze access patterns and caching requirements.
Scans are static assets that are highly requested for 48 hours, meaning we should cache them at the edge with a default TTL of 48 hours (172,800 seconds) to minimize S3 origin requests.
Correctly identifying the high-frequency access window allows for configuration of the optimal TTL to maximize cache efficiency.
2
Determine origin security and client authorization mechanism.
Use Origin Access Control (OAC) to secure the S3 origin, and employ CloudFront signed URLs or signed cookies to restrict file access to authorized clinicians.
OAC prevents direct access to the S3 bucket, while signed URLs or cookies allow authorized access control at the edge before content is served.
3
Evaluate and discard inefficient storage and network paths.
Avoid S3 Standard-IA transitions immediately after upload due to high retrieval fees, and avoid NAT Gateways for S3 retrieval to prevent high data processing charges.
This step ensures that the architecture is cost-efficient and does not introduce unnecessary performance bottlenecks or cost penalties.

Anahtar Kavram

Multi-tier secure caching for high-performance content delivery using CloudFront, S3, OAC, and Signed URLs/Cookies.
Bu soruyu puanla

Konular

High-Performing Content Delivery and Caching Solutions

Bu konudan daha fazla soru