You are building a system to distribute confidential training videos to employees. using cloudfront, what method could be used to serve content that is stored in s3, but not publically accessible from s3 directly?
(a) create an origin access identity (oai) for cloudfront and grant access to the objects in your s3 bucket to that oai.
(b) add the cloudfront account security group "amazon-cf/amazon-cf-sg" to the appropriate s3 bucket policy.
(c) create an identity and access management (iam) user for cloudfront and grant access to the objects in your s3 bucket to that iam user.
(d) create a s3 bucket policy that lists the cloudfront distribution id as the principal and the target bucket as the amazon resource name (arn).

o an

a  social news website  is an  internet  website  that features  user-posted stories. such stories are ranked based on popularity, as voted on by other users of the site or by website administrators. users typically comment online on the news posts and these comments may also be ranked in popularity. since their emergence with the birth of  web 2.0, social news sites have been used to link many types of information, including news, humor, support, and discussion. all such websites allow the users to submit content and each site differs in how the content is moderated. on the  slashdot  and  fark  websites,  administrators  decide which articles are selected for the front page. on  reddit  and  digg, the articles that get the most votes from the community of users will make it to the front page. many social news websites also feature an online comment system, where users discuss the issues raised in an article. some of these sites have also applied their voting system to the comments, so that the most popular comments are displayed first. some social news websites also have a  social networking  function, in that users can set up a user profile and follow other users' online activity on the website.