A Solutions Architect Wants to Make Sure That Only AWS

question 242

Multiple Choice

A Solutions Architect wants to make sure that only AWS users or roles with suitable permissions can access a new Amazon API Gateway endpoint. The Solutions Architect wants an end-to-end view of each request to analyze the latency of the request and create service maps. How can the Solutions Architect design the API Gateway access control and perform request inspections?

• A) For the API Gateway method, set the authorization to AWS_IAM. Then, give the IAM user or role execute-api:Invoke permission on the REST API resource. Enable the API caller to sign requests with AWS Signature when accessing the endpoint. Use AWS X-Ray to trace and analyze user requests to API Gateway.
• B) For the API Gateway resource, set CORS to enabled and only return the company's domain in Access-Control-Allow-Origin headers. Then, give the IAM user or role execute-api:Invoke permission on the REST API resource. Use Amazon CloudWatch to trace and analyze user requests to API Gateway.
• C) Create an AWS Lambda function as the custom authorizer, ask the API client to pass the key and secret when making the call, and then use Lambda to validate the key/secret pair against the IAM system. Use AWS X-Ray to trace and analyze user requests to API Gateway.
• D) Create a client certificate for API Gateway. Distribute the certificate to the AWS users and roles that need to access the endpoint. Enable the API caller to pass the client certificate when accessing the endpoint. Use Amazon CloudWatch to trace and analyze user requests to API Gateway.

---

Definitions:

Mutually Exclusive

Two events that cannot both occur at the same time, often referenced in probability and statistics to describe situations where the happening of one event excludes the occurrence of another.

Subcategories

Specific groups or divisions within a larger category, used to further classify items or data.

Box Plot

A graphical representation of statistical data based on the minimum, first quartile, median, third quartile, and maximum, showcasing the distribution's spread and central tendency.

Median

The middle value in a data set, which divides the data into two halves with an equal number of observations above and below it.