Home / Amazon / SAA-C01 / Question 318

An application provides a feature that allows users to securely download private and personal files. The web server is currently overwhelmed with serving files for download. A Solutions Architect must find a more effective solution to reduce web server load and costs, and must allow users to download only their own files.Which solution meets all requirements?

• A. Store the files securely on Amazon S3 and have the application generate an Amazon S3 pre-signed URL for the user to download.

• B. Store the files in an encrypted Amazon EBS volume, and use a separate set of servers to serve the downloads.

• C. Have the application encrypt the files and store them in the local Amazon EC2 Instance Store prior to serving them up for download.

• D. Create an Amazon CloudFront distribution to distribute and cache the files.

Pre-signed S3 URLs are useful whenever you want to easily provide temporary access to a protected asset. There are two common use cases when you may want to use pre-signed S3 URLs:

Simple, occasional sharing of private files.

Frequent, programmatic access to view or upload a file in an application.