An AWS Lambda Function Requires Read Access to an Amazon

question 278

Multiple Choice

An AWS Lambda function requires read access to an Amazon S3 bucket and requires read/write access to an Amazon DynamoDB table. The correct IAM policy already exists. What is the MOST secure way to grant the Lambda function access to the S3 bucket and the DynamoDB table?

• A) Attach the existing IAM policy to the Lambda function.
• B) Create an IAM role for the Lambda function. Attach the existing IAM policy to the role. Attach the role to the Lambda function.
• C) Create an IAM user with programmatic access. Attach the existing IAM policy to the user. Add the user access key ID and secret access key as environment variables in the Lambda function.
• D) Add the AWS account root user access key ID and secret access key as encrypted environment variables in the Lambda function.

---

Definitions:

BCG Matrix

A strategic planning tool that categorizes a company's business units or products into four quadrants based on their market share and market growth rate, to help in decision-making.

Categories

Classified groups or divisions within a larger system, often used to organize information or items.

Positioning

The strategy of placing a brand or product in the market to occupy a distinct place in the minds of target customers relative to competing products.

Target Market

A specific group of potential customers at whom a company aims its products and services, identified by demographic, geographic, and psychographic characteristics.