A Company Is Running a Publicly Accessible Serverless Application That

question 245

Multiple Choice

A company is running a publicly accessible serverless application that uses Amazon API Gateway and AWS Lambda. The application's traffic recently spiked due to fraudulent requests from botnets. Which steps should a solutions architect take to block requests from unauthorized users? (Choose two.)

• A) Create a usage plan with an API key that is shared with genuine users only.
• B) Integrate logic within the Lambda function to ignore the requests from fraudulent IP addresses.
• C) Implement an AWS WAF rule to target malicious requests and trigger actions to filter them out.
• D) Convert the existing public API to a private API. Update the DNS records to redirect users to the new API endpoint.
• E) Create an IAM role for each user attempting to access the API. A user will assume the role when making the API call.

---

Definitions:

Operant Behavior

Conduct that is governed or impacted by its outcomes, such as incentives or sanctions.

Influences

Factors or agents that have an effect on the development, behavior, or decisions of individuals or systems.

Environment

Every nongenetic influence, from prenatal nutrition to the people and things around us.

Learned Associations

Connections made in the mind between two experiences or ideas, which can influence thoughts, feelings, and behaviors.