Certified Security - Specialty

Sign Up Free or Log In to participate!

Incorrect answer – s3 and OAI question?

Incorrect answer in:

You have created a website hosted in S3 and configured a CloudFront web distribution. Which steps do you need to take to force your users to access your site using CloudFront and not directly using the S3 url? (Choose 3)

You do not Create an origin access identity for your S3 origin

Surely it’s created for the cloudfront distribution

1 Answers


The action of creating the CloudFront distribution, does not automatically set up an origin access identity. If you didn’t create an origin access identity when you created your distribution, you can configure it afterwards by doing the following:


David B

Precisely… if you read the description you create the OAI for the cloudfront distribution, NOT the s3 origin!

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?