AWS Certified SysOps Administrator Practice Exam

To ensure encrypted data exchange as per compliance, what is required when using CloudFront with an S3 bucket?

1. Use HTTP between CloudFront and S3

2. Deny all HTTP requests at the CloudFront level

3. Configure CloudFront to mandate HTTPS for viewer requests

4. Implement a custom authentication mechanism

The correct answer is: Configure CloudFront to mandate HTTPS for viewer requests

Using CloudFront with an S3 bucket while ensuring encrypted data exchange for compliance mandates that the configuration requires HTTPS for viewer requests. This approach not only ensures that the data is transferred securely, protecting it from potential eavesdropping or modification during transit, but also aligns with best practices for data security and compliance standards. Configuring CloudFront to mandate HTTPS means that any request made to the CloudFront distribution must use the secure protocol, which encrypts the data exchanged between the viewer and CloudFront. By enforcing HTTPS, you are helping to safeguard end-user data and maintaining confidentiality and integrity, which are critical in many regulatory environments. In scenarios where compliance is a consideration, relying on HTTP—regardless of the security measures on the back end—could expose sensitive information. Ensuring that all viewer requests are encrypted through HTTPS is a proactive step to mitigate risks associated with data breaches or leaks, making it the essential choice for organizations that prioritize data security.