Amazon Exam DVA-C02 Topic 1 Question 8 Discussion

Actual exam question for Amazon's DVA-C02 exam

Question #: 8
Topic #: 1

A company has deployed infrastructure on AWS. A development team wants to create an AWS Lambda function that will retrieve data from an Amazon Aurora database. The Amazon Aurora database is in a private subnet in company's VPC. The VPC is named VPC1. The data is relational in nature. The Lambda function needs to access the data securely.

Which solution will meet these requirements?

ACreate the Lambda function. Configure VPC1 access for the function. Attach a security group named SG1 to both the Lambda function and the database. Configure the security group inbound and outbound rules to allow TCP traffic on Port 3306.

BCreate and launch a Lambda function in a new public subnet that is in a new VPC named VPC2. Create a peering connection between VPC1 and VPC2.

CCreate the Lambda function. Configure VPC1 access for the function. Assign a security group named SG1 to the Lambda function. Assign a second security group named SG2 to the database. Add an inbound rule to SG1 to allow TCP traffic from Port 3306.

DExport the data from the Aurora database to Amazon S3. Create and launch a Lambda function in VPC1. Configure the Lambda function query the data from Amazon S3.

Show Suggested Answer

Suggested Answer: C

by Dalene at Apr 24, 2023, 05:46 AM

Limited Time Offer

25%

Off

Get Premium DVA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sean

21 days ago

Option A all the way! I'm a big fan of keeping things simple. No need to complicate it with extra VPCs or data exports.

upvoted 0 times

...

Keith

23 days ago

Option D seems like a bit of a detour. Exporting the data to S3 and then querying it from the Lambda function feels like an extra step.

upvoted 0 times

Samira

2 days ago

A: Option A sounds like the best choice. We can configure VPC1 access for the Lambda function and attach a security group to both the function and the database.

upvoted 0 times

...

Alba

26 days ago

Hmm, Option B with the VPC peering connection is an interesting approach, but it might add unnecessary complexity for this use case.

upvoted 0 times

...

Rozella

27 days ago

I like the idea of Option C. Separating the security groups for the Lambda function and the database gives us more control over the access rules.

upvoted 0 times

Rory

1 days ago

I agree, having separate security groups for the Lambda function and the database adds an extra layer of security.

upvoted 0 times

...

Annamaria

21 days ago

Option C sounds like a good choice. Separating the security groups is a smart move.

upvoted 0 times

...

Tyra

1 months ago

Option A seems like the straightforward way to go. Configuring the Lambda function and the database to be in the same VPC and security group should provide the secure access we need.

upvoted 0 times

Moon

4 days ago

I agree, having the Lambda function and database in the same VPC with the same security group makes it easier to manage and secure the access.

upvoted 0 times

...

Veronika

17 days ago

Option A seems like the straightforward way to go. Configuring the Lambda function and the database to be in the same VPC and security group should provide the secure access we need.

upvoted 0 times

...

Christiane

2 months ago

I'm not sure about option A. I think option C could also work by assigning different security groups to the Lambda function and the database. It might provide more flexibility in terms of security configurations.

upvoted 0 times

...

Twanna

2 months ago

I agree with Isidra. Option A seems to be the most secure way to retrieve data from the Amazon Aurora database in a private subnet.

upvoted 0 times

...

Isidra

2 months ago

I think option A is the best solution. It ensures secure access to the data by configuring VPC1 access for the Lambda function and attaching a security group to both the function and the database.

upvoted 0 times

...