How does CloudFront securely work with an S3 bucket origin?

Q: How does CloudFront securely work with an S3 bucket origin?

> Using **Origin Access Control (OAC)**: 1. Configure the S3 bucket to be completely private. 2. Enable OAC in CloudFront. 3. Configure the S3 bucket policy to allow read/GET access *only* from the CloudFront service principal. This prevents users from bypassing CDN restrictions to access the S3 bucket directly.

💬Answer

Using Origin Access Control (OAC):

Configure the S3 bucket to be completely private.
Enable OAC in CloudFront.
Configure the S3 bucket policy to allow read/GET access only from the CloudFront service principal. This prevents users from bypassing CDN restrictions to access the S3 bucket directly.

Related AWS Questions

View All AWSQuestions →

What is cloud computing?

What is the difference between CapEx and OpEx?

Explain elasticity with a real-world example.

What is the difference between Public, Private, and Hybrid cloud models?

Created by

Apurv Gujjar

DevOps & Cloud Engineer

Specialized in:DevOpsAWSGCPKubernetesTerraformDocker

View Portfolio