Question

A media company serves video thumbnails and metadata through CloudFront backed by an Application Load Balancer in a single AWS Region. During viral traffic spikes, they observe that origin request volume overwhelms the ALB even though most objects are cacheable, because CloudFront has many regional edge caches making independent requests to the origin on cache misses. The security team also wants to minimize the origin's exposure to direct request bursts. Which CloudFront configuration change most directly reduces redundant origin fetches and consolidates requests to the origin?

Accepted Answer

Enable CloudFront Origin Shield in the Region closest to the origin so cache misses are consolidated through a single additional caching layer

Answer

Attach an AWS WAF rate-based rule to the CloudFront distribution to throttle requests before they reach the origin

Answer

Increase the default TTL to the maximum and rely on regional edge caches to independently serve traffic without contacting the origin

Answer

Replace the ALB origin with an Origin Access Control configuration to authenticate all origin requests