Apply | AWS Practice

Choose one answer

A company needs a globally distributed HTTPS static website. The S3 bucket must not be publicly readable, and viewers must use the custom domain. Which architecture best meets the requirement?

Enable S3 website hosting, make the bucket public, and point Route 53 directly to it.Run NGINX on one public EC2 instance and copy the site onto its root volume.Use an S3 gateway endpoint so internet viewers can reach the private bucket.Use CloudFront with a regular S3 bucket origin and OAC, a bucket policy scoped to the distribution, Route 53 alias records, and an ACM certificate for CloudFront.