Exam AWS Certified Developer Associate topic 1 question 3 discussion

This should be option B - Lambda@Ege with a Origin Request Trigger. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-examples.html

The Answer Should be B here is the reference https://aws.amazon.com/blogs/networking-and-content-delivery/dynamically-route-viewer-requests-to-any-origin-using-lambdaedge/

The data needs to be stored in af-south-1, but the app is currently using us-east-1 as the origin. Lambda@Edge is a serverless compute service that runs code globally at AWS edge locations. By using Lambda@Edge as an origin request trigger, you can dynamically modify the origin of the CloudFront request based on user attributes like geography. For example: South African users can be redirected to content stored in the af-south-1 S3 bucket. Other users can continue accessing the us-east-1 S3 bucket.

How could this be A? What is the point of restricting users from a location, if you are launching an app in that region? Can someone kindly explain the rationale behind A? PS - I feel the answer should be B

The Answer Should be B here is the reference https://aws.amazon.com/blogs/networking-and-content-delivery/dynamically-route-viewer-requests-to-any-origin-using-lambdaedge/

Answer is A As we have predefined feature in AWS to restrict user to access/restrict content with specific country But option B is having some overhead of writing extra code which may miss some use cases or may go wrong

lambda@edge is a CloudFront functionality that allow us to implement some logic by using Node.js or python at the following points: - After CloudFront receives a request from a viewer (viewer request) - Before CloudFront forwards the request to the origin (origin request) - After CloudFront receives the response from the origin (origin response) - Before CloudFront forwards the response to the viewer (viewer response) We need to consider the origin in order to change and configure the S3 destination for users in Africa before send the response to the user. So, by exclusion, the B is the correct one. (https://docs.aws.amazon.com/lambda/latest/dg/lambda-edge.html)

The answer A is confusion because "The company is launching the mobile app in South Africa", the A is refuse users in SA to access the APP. And "The company does not want to deploy a specific mobile client for South Africa" is mean the company don't want to issue a local version for SA, so B is correct answer. But looks D also correct

should be Be because of different data for this two destinations

It should be B

Option A:Use the CloudFront geographic restriction feature to block access to users in South Africa will block the access to all the users in South Africa and it clearly mentioned that only to specific client it is to be deployed hence I chose B because Viewer policy is to enable SSL between end-user and cloud-front which is not the requested case

Option A doesn't change the S3 bucket origin region, it simply restricts the users based trying to access CF

The company can use Amazon S3 Cross-Region Replication (CRR) to replicate the data from the us-east-1 Region to the af-south-1 Region. Once the data is replicated to the af-south-1 Region, the company can update the CloudFront distribution to use the S3 bucket in the af-south-1 Region as the origin. This way, the mobile app users in South Africa will be served the content from the af-south-1 Region, while users in other regions will continue to be served from the us-east-1 Region. It is important to note that, CRR is a one-way replication and there will be a delay in the replication, so it is important to plan for this potential delay and test the solution.

Lambda@Ege with a Origin Request Trigger.

This should be option B

answer B, https://www.cloud-exam-prepare.com/?dynamically-route-viewer-requests/

This should be B? https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-examples.html#lambda-examples-content-based-S3-origin-request-trigger