Ravi Sir's Cards › AWS
Why not Principal * with OAC?
This interview card answers: Why not Principal * with OAC? Principal * GetObject lets clients skip CloudFront controls (WAF, auth, cache). Allow only the CloudFront service principal. Direct S3 URL 403 after correct policy.
Read card text
What this card says
What it is
Principal * GetObject lets clients skip CloudFront controls (WAF, auth, cache).
Principal
Why it matters
Allow only the CloudFront service principal.
How / example
Direct S3 URL 403 after correct policy.