A Company Has an Application That Calls AWS Lambda Functions

question 375

Multiple Choice

A company has an application that calls AWS Lambda functions. A code review shows that database credentials are stored in a Lambda function's source code, which violates the company's security policy. The credentials must be securely stored and must be automatically rotated on an ongoing basis to meet security policy requirements. What should a solutions architect recommend to meet these requirements in the MOST secure manner?

• A) Store the password in AWS CloudHSM. Associate the Lambda function with a role that can use the key ID to retrieve the password from CloudHSM. Use CloudHSM to automatically rotate the password.
• B) Store the password in AWS Secrets Manager. Associate the Lambda function with a role that can use the secret ID to retrieve the password from Secrets Manager. Use Secrets Manager to automatically rotate the password.
• C) Store the password in AWS Key Management Service (AWS KMS). Associate the Lambda function with a role that can use the key ID to retrieve the password from AWS KMS. Use AWS KMS to automatically rotate the uploaded password.
• D) Move the database password to an environment variable that is associated with the Lambda function. Retrieve the password from the environment variable by invoking the function. Create a deployment script to automatically rotate the password.

---

Definitions:

Transfer Payments

Money distributed from one entity to another without an exchange of goods or services, e.g., social security benefits.

Distribution Of Income

The way in which a nation’s total income is distributed among its population, affecting economic disparity and wealth distribution.

Income Equality

The extent to which income is distributed in a relatively equal manner among the population.

Two-Year Data

Information or statistical figures collected or observed over a two-year period.