A Developer Is Migrating Code to an AWS Lambda Function

question 112

Multiple Choice

A developer is migrating code to an AWS Lambda function that will an Amazon Aurora MySQL database. What is the MOST secure way to authenticate the function to the database?

• A) Store the database credentials as encrypted parameters in AWS Systems Manager Parameters Store. Obtain the credentials from Systems Manager when the Lambda function needs to connect to the database.
• B) Store the database credentials in AWS Secrets Manager. Let Secrets Manager handle the rotation of the credentials, as required.
• C) Store the database credentials in an Amazon S3 bucket that has a restrictive bucket policy for the Lambda role when accessing the credentials. Use AWS KMS to encrypt the data.
• D) Create a policy with rds-db:connect access to the database and attach it to the role assigned to the Lambda function.

---

Definitions:

Home Page

The introductory or main web page of a website, serving as the starting point for navigation and often providing a summary of the site's content and features.

Usability Testing

The evaluation of a product or service by testing it with representative users to identify usability problems and improvements.

Document Design

The process of structuring and formatting information in written documents to enhance readability and comprehension.

Design Principles

Fundamental guidelines or standards applied in creating and organizing visual elements in artwork, graphics, and layouts to achieve aesthetic and functional objectives.