A company stores copyrighted images on AWS for a global customer base. Customers must get fast access, and access must be blocked from specific countries. The company wants the lowest possible cost. Which solution meets these requirements?

The correct solution uses Amazon S3 for cost-effective storage and Amazon CloudFront for global distribution, fast access, and geographic restrictions to block access from specific countries. CloudFront also supports signed URLs, which provide secure, temporary access to content, addressing the need for controlled access. This combination is highly scalable and cost-effective. Incorrect options: Storing images directly in S3 and providing public links is insecure and does not allow for geographic restrictions or controlled access per customer. MFA is for S3 management, not customer access. Creating an IAM user for each customer is not scalable or practical for a large customer base and doesn't provide geographic restrictions or fast global access. Using EC2 instances behind ALBs for image storage is significantly more expensive and complex than S3 and CloudFront, and managing instances across multiple regions for global distribution is inefficient.