Question $6$

You are working as a Cloud Security Engineer in your company, and they asked you to ensure that all confidential files shared via S$3$ cannot be accessed directly. Which of these options could satisfy this requirement?

$1.$Assign an IAM user access to objects in the S$3$ bucket used with CloudFront

$2.$Create an Origin Access Identity $($OAI$)$ and associate it with your CloudFront distribution. Change the permissions on your Amazon $53$ bucket so th only the origin access identity has read permissions.

Write an S$3$ bucket policy that assigns the CloudFront distribution ID as the Principal and the target bucket as the ARN

Enable CORS for the $$3$ bucket.