A SysOps administrator is re-architecting an application. The SysOps administrator has moved the database from a public subnet, where the database used a public endpoint. into a private subnet to restrict access from the public network. After this change, an AWS Lambda function that requires read access to the database cannot connect to the database. The SysOps administrator must resolve this issue without compromising security.
Which solution meets these requirements?

Question

A SysOps administrator is re-architecting an application. The SysOps administrator has moved the database from a public subnet, where the database used a public endpoint. into a private subnet to restrict access from the public network. After this change, an AWS Lambda function that requires read access to the database cannot connect to the database. The SysOps administrator must resolve this issue without compromising security.

Which solution meets these requirements?

DATA 7 DATA7 · Accepted Answer

Connect the Lambda function to the database VPC. Connect to the database using its private endpoint.

DATA 7 DATA7 · Answer

Create an AWS PrivateLink interface endpoint for the Lambda function. Connect to the database using its private endpoint.

DATA 7 DATA7 · Answer

Attach an 1AM role to the Lambda function with read permissions to the database.

DATA 7 DATA7 · Answer

Move the database to a public subnet. Use security groups for secure access.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 335 - SOA-C02 discussion

Suggested answer: B

0 comments