Amazon Exam SCS-C02 Topic 9 Question 38 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 38
Topic #: 9

A company uses HTTP Live Streaming (HL'S) to stream live video content to paying subscribers by using Amazon CloudFront. HLS splits the video content into chunks so that the user can request the right chunk based on different conditions. Because the video events last for several hours, the total video is made up of thousands of chunks.

The origin URL is not disclosed, and every user is forced to access the CloudFront URL. The company has a web application that authenticates the paying users against an internal repository and a CloudFront key pair that is already issued.

What is the simplest and MOST effective way to protect the content?

ADevelop the application to use the CloudFront key pair to create signed URLs that users will use to access the content.

BDevelop the application to use the CloudFront key pair to set the signed cookies that users will use to access the content.

CDevelop the application to issue a security token that Lambda@Edge will receive to authenticate and authorize access to the content

DKeep the CloudFront URL encrypted inside the application, and use AWS KMS to resolve the URL on-the-fly after the user is authenticated.

Show Suggested Answer

Suggested Answer: B

Utilizing CloudFront signed cookies is the simplest and most effective way to protect HLS video content for paying subscribers. Signed cookies provide access control for multiple files, such as video chunks in HLS streaming, without the need to generate a signed URL for each video chunk. This method simplifies the process for long video events with thousands of chunks, enhancing user experience while ensuring content protection.

by Johnna at Dec 06, 2024, 01:10 AM

Limited Time Offer

25%

20 days ago

Hmm, I'm not sure about that Lambda@Edge idea in option C. Seems a bit complex for this use case.

upvoted 0 times

Bette

6 days ago

Hmm, I agree. Option A seems like the simplest and most effective way to protect the content.

upvoted 0 times

...

Francesco

10 days ago

A) Develop the application to use the CloudFront key pair to create signed URLs that users will use to access the content.

upvoted 0 times

...

Vilma

27 days ago

Option B looks good too. Using signed cookies could be a more user-friendly approach than dealing with URLs.

upvoted 0 times

...

Pearly

1 months ago

I think option A is the way to go. Creating signed URLs using the CloudFront key pair seems like a straightforward and effective way to protect the content.

upvoted 0 times

Junita

9 days ago

I agree, option A seems like the best choice for protecting the content.

upvoted 0 times

...

Sol

1 months ago

I think the simplest and most effective way to protect the content is by developing the application to use the CloudFront key pair to create signed URLs.

upvoted 0 times

...