You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point, you find out that other sites have been linking to the photos on your site, causing loss to your business. What would be an effective method to mitigate this?

Answer options:

A.Remove public read access and use presigned URL with expiry dates.
B.Use CloudFront distributions for static content.
C.Block the IPs of the offending websites in Security Groups.
D.Store photos on an EBS Volume of the web server.

Correct Answer – A
When you create a presigned URL, you must provide your security credentials and then specify a bucket name, an object key, an HTTP method (PUT for uploading objects), and an expiration date and time. The presigned URLs are valid only for the specified duration. 
Option B is incorrect because CloudFront is used to distribute content across edge or region locations, distribution is not the requirement above.
Option C is not feasible. Because of their dynamic nature, blocking IPs is challenging, and you will not know which sites are accessing your main site.
Option D is incorrect since storing photos on an EBS Volume is neither good practice nor an ideal architectural approach for an AWS Solutions Architect.
For more information on signed cookies, please visit the following URL: 
https://docs.aws.amazon.com/AmazonS3/latest/userguide/PresignedUrlUploadObject.html