One of your requirements is to setup an S3 bucket to store your files like documents and images. However, those objects should not be directly accessible via the S3 URL, they should only be accessible from pages on your website so that only your paying customers can see them. How could you implement this? Choose the correct option from the below:
A. Use HTTPS endpoints to encrypt your data.
B. You can use a bucket policy and check for the AWS: Referer key in a condition, where that key matches your domain
C. You can't. The S3 URL must be public in order to use it on your website.
D. You can use server-side and client-side encryption, where only your application can decrypt the objects