Ravi Sir's Cards › AWS
How do you test OAC deny?
This interview card answers: How do you test OAC deny? Fetch via CloudFront URL (allow) and via S3 REST URL (deny). Watch for cached CF 200 after policy change — invalidate if needed. Curl S3 , then 403; curl CF , then 200.
Read card text
What this card says
What it is
Fetch via CloudFront URL (allow) and via S3 REST URL (deny).
AccessDenied
Why it matters
Watch for cached CF 200 after policy change — invalidate if needed.
How / example
curl S3 → 403; curl CF → 200.