Bird
0
0

You want to restrict access to your S3 static website so only users from a specific IP range can view it. Which method is best to implement this restriction?

hard📝 Application Q9 of 15
AWS - S3 Fundamentals
You want to restrict access to your S3 static website so only users from a specific IP range can view it. Which method is best to implement this restriction?
AAdd a bucket policy with IP address condition
BEnable S3 Block Public Access
CSet object ACLs to private
DUse AWS WAF with CloudFront in front of the bucket
Step-by-Step Solution
Solution:
  1. Step 1: Understand IP restriction options

    S3 bucket policies can restrict IPs but only for authenticated requests, not public website access.
  2. Step 2: Use AWS WAF with CloudFront

    Placing CloudFront in front of S3 and using AWS WAF allows IP-based filtering for public website access.
  3. Final Answer:

    Use AWS WAF with CloudFront in front of the bucket -> Option D
  4. Quick Check:

    IP restriction on public site = Use WAF + CloudFront [OK]
Quick Trick: Use WAF with CloudFront for IP-based website restrictions [OK]
Common Mistakes:
MISTAKES
  • Relying on bucket policy IP condition for public access
  • Blocking public access disables website
  • Setting private ACLs blocks all users

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes