SOA-C01 Exam Dumps : AWS Certified SysOps Administrator - Associate

Ensure that only required cookies, query strings, and headers are forwarded in the Cache Behavior Settings

Change the Viewer Protocol Policy to use HTTPS only

Configure the distribution to use presigned cookies and URLs to restrict access to the distribution

Enable automatic compression of objects in the Cache Behavior Settings

Increase the CloudFront time to live (TTL) settings in the Cache Behavior Settings.

Update the EFS file system settings to enable server-side encryption using AES-256.

Create a new encrypted EFS file system and copy the data from the unencrypted EFS file system to the new encrypted EFS file system.

Use AWS CloudHSM to encrypt the files directly before storing them in the EFS file system.

Modify the EFS file system mount options to enable Transport Layer Security (TLS) on each of the EC2 instances.

Create a customer gateway to connect to Amazon S3 Modify the route table of the private subnets to use the customer gateway

Create a gateway VPC endpoint for Amazon S3 Modify the route table of the private subnets to use the gateway VPC endpoint.

Create a NAT gateway in the private subnets. Modify the route table of the subnets to use the NAT gateway.

Create an S3 bucket policy to allow connections from the private subnets. Modify the route table.