A Company Has an Application That Calls AWS Lambda Functions

question 375

Multiple Choice

A company has an application that calls AWS Lambda functions. A code review shows that database credentials are stored in a Lambda function's source code, which violates the company's security policy. The credentials must be securely stored and must be automatically rotated on an ongoing basis to meet security policy requirements. What should a solutions architect recommend to meet these requirements in the MOST secure manner?

• A) Store the password in AWS CloudHSM. Associate the Lambda function with a role that can use the key ID to retrieve the password from CloudHSM. Use CloudHSM to automatically rotate the password.
• B) Store the password in AWS Secrets Manager. Associate the Lambda function with a role that can use the secret ID to retrieve the password from Secrets Manager. Use Secrets Manager to automatically rotate the password.
• C) Store the password in AWS Key Management Service (AWS KMS). Associate the Lambda function with a role that can use the key ID to retrieve the password from AWS KMS. Use AWS KMS to automatically rotate the uploaded password.
• D) Move the database password to an environment variable that is associated with the Lambda function. Retrieve the password from the environment variable by invoking the function. Create a deployment script to automatically rotate the password.

---

Definitions:

Cash Flows

Refers to the net amount of cash and cash equivalents being transferred into and out of a business.

Operating Activities

Activities that relate directly to the business's primary operations, such as sales, purchasing, and payroll.

Income Statement

A financial report that shows a company's revenues, expenses, and profits over a specific period of time.

Operating Activities

Business transactions and events related to the core business operations, including revenue and expense transactions that affect net income.