Your company is running a photo-sharing website. Currently, all the photos are stored in S3. At some point, the company finds out that other sites have been linking to your site`s photos, which causes loss to your business. You need to implement a solution for the company to mitigate this issue. Which of the following would you look at implementing?

Answer options:

A.Remove public read access and use signed URLs with expiry dates.
B.Use CloudFront distributions for static content.
C.Block the IPs of the offending websites in Security Groups.
D.Store photos on an EBS volume of the web server.

Answer - A
The AWS Documentation mentions the following.
A pre-signed URL gives you access to the object identified in the URL, provided that the creator of the pre-signed URL has permission to access that object. That is, if you receive a pre-signed URL to upload an object, you can upload the object only if the creator of the pre-signed URL has the necessary permissions to upload that object.
Option B is incorrect since CloudFront is only used to distribute content across edge or region locations. It is not used for restricting access to content.
Option C is incorrect since Blocking IP’s is challenging because they are dynamic in nature, and you will not know which sites are accessing your main site.
Option D is incorrect since Storing photos on EBS volume is not a good practice or architecture approach for an AWS Solution Architect.
For more information on serving private content, please visit the URL-
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-signed-urls.html