A Company Has an Application That Calls AWS Lambda Functions

question 381

Multiple Choice

A company has an application that calls AWS Lambda functions. A recent code review found database credentials stored in the source code. The database credentials need to be removed from the Lambda source code. The credentials must then be securely stored and rotated on an ongoing basis to meet security policy requirements. What should a solutions architect recommend to meet these requirements?

• A) Store the password in AWS CloudHSM. Associate the Lambda function with a role that can retrieve the password from CloudHSM given its key ID.
• B) Store the password in AWS Secrets Manager. Associate the Lambda function with a role that can retrieve the password from Secrets Manager given its secret ID.
• C) Move the database password to an environment variable associated with the Lambda function. Retrieve the password from the environment variable upon execution.
• D) Store the password in AWS Key Management Service (AWS KMS). Associate the Lambda function with a role that can retrieve the password from AWS KMS given its key ID.

---

Definitions:

Binding Problem

The challenge in cognitive science of explaining how different aspects of a sensory experience (like color, shape, and location) are integrated into a cohesive whole in our perception.

Functions

Mathematical entities that assign a single output value for each input value, following specific rules or relationships.

Split-Brain Patients

Individuals who have had the corpus callosum, the connective bridge between the brain's two hemispheres, severed, often as a treatment for severe epilepsy, leading to unique insights into brain function.

Minds

The element of a person that enables them to be aware of the world and their experiences, to think, and to feel; the faculty of consciousness and thought.