A CloudOps engineer is troubleshooting a website that will not load for users.

Vendor: Amazon Web Services
Product: SOA-C03
Update on: Jun 13, 2026
Questions: 219

Amazon Web Services SOA-C03 Question Answer

A CloudOps engineer is troubleshooting a website that will not load for users. The website is hosted by an Amazon CloudFront distribution that has an Amazon S3 bucket as the origin. The CloudFront distribution is named d111111abcdef8.cloudfront.net. The S3 bucket has the following Amazon Resource Name (ARN): arn:aws:s3:::example-com-website-files. The S3 bucket has S3 Block Public Access enabled. The CloudOps engineer examines the website ' s DNS CNAME records and discovers that the record value is set to s3.amazonaws.com/example-com-website-files/.

What should the CloudOps engineer do to configure the website for use with CloudFront?

Disable S3 Block Public Access on the S3 bucket.

Create an S3 access point in the same AWS Region where the S3 bucket is located. Configure the access point policy to allow CloudFront to read from the S3 bucket. Point the CNAME record to the S3 access point name.

Modify the value of the DNS CNAME record to be arn:aws:s3:::example-com-website-files instead of the S3 URL.

Modify the value of the DNS CNAME record to be d111111abcdef8.cloudfront.net instead of the S3 URL.