Ravi Sir's Cards › AWS
Why CloudFront OAC with a private S3 bucket?
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
What it is
Bucket stays private; only CloudFront can read objects.
Why it matters
Users get HTTPS and caching without public bucket ACLs.
How / example
Attach the bucket policy CloudFront shows when you create OAC.