CloudFront

Question 1

How to enable Cloudfront origin failover?

Answer 1

• Create an origin group with two origins: a primary and a secondary.
• If the primary origin is unavailable, or returns specific HTTP response status codes that indicate a failure
• CloudFront automatically switches to the secondary origin.

Question 2

What are the ways CloudFront provides to send authenticated requests to an Amazon S3 origin?

Answer 2

• Origin access control (OAC).
• Origin access identity (OAI).

We recommend using OAC because it supports:

• All Amazon S3 buckets in all AWS Regions, including opt-in Regions launched after December 2022
• Amazon S3 server-side encryption with AWS KMS (SSE-KMS)
• Dynamic requests (PUT and DELETE) to Amazon S3