Please enable JavaScript.

Coggle requires JavaScript to display documents.

CloudFront (Field level Encryption (additional layer of security (securely…

- - - - encrypted at the edge closer to the user
        
        specify POST/public key
        
        origin must support chunked
        
        aysmmetric
- - - - Advanced Sec Features
        
        integrates with waf
        
        full access control and signed url/cookies
        
        basic whitelist/blacklist geo location per distro
        
        3rd party solutions
        
        restrict view acces per distro
        
        1 more item...
- - - - inspect headers or authorized tokens
        
        add/delete/modify headers, rewrite different users to different obj in cache
        
        generate new http responses to redirect unauthenticated users to login pages
- - - - only adds statements, must remove old
- - - - define accounts which can sign, key pair trustedsigners
        
        NO RTMP
- - - - much more accurate
- - - - based on IP, geoIP database
- - - - KMS
        
        S3 evaluates and applies bucket policies before applying bucket encryption settings.
- - - - SSE-C not supported
        
        ownership/ACL replicated
        
        no lifecycle
        
        owner no perms = no replication