EduFlow
AWS Cloud Foundations

Checkpoint: Building Something Real

Five questions on this section. Answer all of them, then see your score and why each answer is right or wrong.

Question 1 of 5

Lantern’s site bucket policy allows s3:GetObject to the cloudfront.amazonaws.com service principal but has no AWS:SourceArn condition. What is the risk?

Question 2 of 5

After switching the distribution’s origin to origin access control, every file returns 403 from CloudFront. The bucket is private and Block Public Access is on. What is the most likely cause?

Question 3 of 5

Why does Lantern set reserved concurrency on the RSVP function?

Question 4 of 5

Lantern’s error alarm uses --treat-missing-data notBreaching. What does that mean on a quiet night with no invocations?

Question 5 of 5

A Well-Architected review notes that the RSVP table has no point-in-time recovery, so a bad script could wipe it with no way back. Which pillar does this finding belong to?

5 questions unanswered