A company deployed an Amazon CloudFront distribution that accepts requests and routes to an Amazon...

Amazon Web Services DOP-C02 Question Answer

A company deployed an Amazon CloudFront distribution that accepts requests and routes to an Amazon API Gateway HTTP API. During a recent security audit, the company discovered that requests from the internet could reach the HTTP API without using the CloudFront distribution.

A DevOps engineer must ensure that connections to the HTTP API use the CloudFront distribution.

Which solution will meet these requirements?

Enable VPC Flow Logs to identify requests that reach the HTTP API.

Deploy AWS WAF in front of the CloudFront distribution.

Implement an identity-based policy on the CloudFront distribution that requires authentication to make requests to the HTTP API.

Implement a custom header in the CloudFront distribution. Implement an AWS Lambda authorizer associated with the HTTP API that verifies the custom header.

Amazon Web Services DOP-C02 View All Questions

Amazon Web Services DOP-C02 Summary

Vendor: Amazon Web Services
Product: DOP-C02
Update on: Mar 21, 2026
Questions: 425

Price: $52.5 ~~$149.99~~

Buy Now DOP-C02 PDF + Testing Engine Pack

A DevOps engineer is designing an application that integrates with a legacy REST API.

A company uses AWS Control Tower and Organizations for a multi-account environment.

Spring Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: xmasmnth

A company deployed an Amazon CloudFront distribution that accepts requests and routes to an Amazon...

The Answer Is:

Explanation:

Amazon Web Services DOP-C02 Summary

Payments We Accept

Contact Us