Can I make encrypted S3 static website only accessible through CloudFront?

0

Can I store encrypted files on S3 and then make them available through CloudFront, with the decryption key held by CloudFront? Or is there any other way the build file of the static website is hosted but the files are not accessible by any other IAM.

1 réponse
2

It is possible to restrict access except via CloudFront.
Follow the steps in the following document to set up OAC.
OAC can be used with S3 default encryption or with encryption using KMS.
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html

The following document explains OAC in detail and should be read once.
https://aws.amazon.com/jp/blogs/networking-and-content-delivery/amazon-cloudfront-introduces-origin-access-control-oac/

profile picture
EXPERT
répondu il y a 10 mois
profile picture
EXPERT
vérifié il y a 10 mois
profile pictureAWS
EXPERT
vérifié il y a 10 mois

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions