Company D is running their corporate website on Amazon S3 accessed from http//www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint https://s3-us-west-1.amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser. What should Company D do to prevent the web fonts from being blocked by the browser?
A) Enable versioning on the cdfonts bucket for each web font
B) Create a policy on the cdfonts bucket to enable access to everyone
C) Add the Content-MD5 header to the request for webfonts in the cdfonts bucket from the website
D) Configure the cdfonts bucket to allow cross-origin requests by creating a CORS configuration

Question

Quizplus · Accepted Answer

The issue is likely due to the browser's same-origin policy blocking the fonts. Configuring CORS (Cross-Origin Resource Sharing) on the cdfonts bucket will allow the web fonts to be accessed from the corporate website's domain.

Company D Is Running Their Corporate Website on Amazon S3