Security Consultant
This is not a question, this is information.
Usage of OAI,we need not change Object ACLs, we can leave it with default ACL (deny Public), create OAI, with update access policy to acces the object using cloudfront URL.
Certified Security - Specialty
Sign Up Free or Log In to participate!
Object need not be made public to be used with OAI
Tested this successfully.
funnily enough the object I made public is still accessible from the S3 URL without Cloudfront.
I re:re:retested this successfully also. One assertion and two validations!
As per the lecture, Cloudfront set up might take 4 to 48 hours to come into effect, thats why probably you Ayub was still able to access through S3