A developer is designing a serverless application for a game in which users register and log in through a web browser The application makes requests on behalf of users to a set of AWS Lambda functions that run behind an Amazon API Gateway HTTP API
The developer needs to implement a solution to register and log in users on the application's sign-in page. The solution must minimize operational overhead and must minimize ongoing management of user identities.
Which solution will meet these requirements'?
Amazon Cognito User Pools:A managed user directory service, simplifying user registration and login.
Social Identity Providers:Cognito supports integration with external providers (e.g., Google, Facebook), reducing development effort.
IAM Roles for Authorization:Cognito-managed IAM roles grant fine-grained access to AWS resources (like Lambda functions).
Operational Overhead:Cognito minimizes the need to manage user identities and credentials independently.
Amazon Cognito Documentationhttps://docs.aws.amazon.com/cognito/
Cognito User Pools for Web Applications:https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-integration.html
A company uses an AWS Lambda function to transfer files from an Amazon S3 bucket to the company's SFTP server. The Lambda function connects to the SFTP server by using credentials such as username and password. The company uses Lambda environment variables to store these credentials.
A developer needs to implement encrypted username and password credentials.
Which solution will meet these requirements?
A developer previously deployed an AWS Lambda function as a .zip package. The developer needs to deploy the Lambda function as a container.
Why Option A is Correct:Converting a Lambda function to use a container image involves packaging the function code into a container image, storing the image in Amazon Elastic Container Registry (ECR), and updating the function to use the ECR repository URI.
Why Other Options are Incorrect:
Option B: SAM templates support container-based Lambda deployment, but storing the image in S3 is not applicable.
Option C: CloudFormation does not natively support specifying Lambda container images in S3.
Option D: While partially correct, it omits the need to specify the image tag for the deployment.
AWS Documentation Reference:
Lambda Container Images
A developer is deploying an AWS Lambda function The developer wants the ability to return to older versions of the function quickly and seamlessly.
How can the developer achieve this goal with the LEAST operational overhead?
A function alias is a pointer to a specific Lambda function version. You can use aliases to create different environments for your function, such as development, testing, and production. You can also use aliases to perform blue/green deployments by shifting traffic between two versions of your function gradually. This way, you can easily roll back to a previous version if something goes wrong, without having to redeploy your code or change your configuration. Reference:AWS Lambda function aliases
A company has an existing application that has hardcoded database credentials A developer needs to modify the existing application The application is deployed in two AWS Regions with an active-passive failover configuration to meet company's disaster recovery strategy
The developer needs a solution to store the credentials outside the code. The solution must comply With the company's disaster recovery strategy
Which solution Will meet these requirements in the MOST secure way?
AWS Secrets Manager is a service that allows you to store and manage secrets, such as database credentials, API keys, and passwords, in a secure and centralized way.It also provides features such as automatic secret rotation, auditing, and monitoring1. By using AWS Secrets Manager, you can avoid hardcoding credentials in your code, which is a bad security practice and makes it difficult to update them.You can also replicate your secrets to another Region, which is useful for disaster recovery purposes2. To access your secrets from your application, you can use the ARN of the secret, which is a unique identifier that includes the Region name.This way, your application can use the appropriate secret based on the Region where it is deployed3.
AWS Secrets Manager
Replicating and sharing secrets
Using your own encryption keys
Eric Adams
7 days agoElizabeth Reed
9 days agoBetty Green
9 days agoChristopher Phillips
9 days agoCharles Carter
9 days agoLinda Garcia
9 days agoMatthew Flores
9 days agoMonica Parker
9 days agoAnthony Wilson
9 days agoMelissa Scott
20 days agoSandra Wilson
25 days agoDennis Hall
29 days agoLaura Baker
1 month agoAnthony Smith
1 month agoRyan Roberts
22 days agoThomas Hall
17 days agoAmy Scott
15 days agoChristopher Martinez
1 month agoPeggie
2 months agoIvette
2 months agoFrancoise
2 months agoRamonita
3 months agoGail
3 months agoLawrence
3 months agoArlyne
3 months agoVeronika
4 months agoAn
4 months agoChristiane
4 months agoTonette
4 months agoAnjelica
5 months agoAleisha
5 months agoArminda
5 months agoReita
5 months agoLaticia
6 months agoLenna
6 months agoGregg
6 months agoElvera
7 months agoAudry
7 months agoShalon
7 months agoChau
7 months agoTwana
8 months agoAudra
8 months agoJohana
8 months agoDalene
8 months agoCarline
9 months agoHoney
9 months agoLayla
11 months agoBettina
12 months agoVashti
1 year agoAileen
1 year agoStevie
1 year agoLeonida
1 year agoWalker
1 year agoLenna
1 year agoDonte
1 year agoCasey
1 year agoNilsa
2 years agoTasia
2 years agoToi
2 years agoSabra
2 years agoAvery
2 years agoDyan
2 years agoEve
2 years agoSolange
2 years agoErick
2 years agoTeddy
2 years agoColeen
2 years agoIlona
2 years agoAn
2 years agoLavera
2 years agoEdwin
2 years agoKaitlyn
2 years agoCordelia
2 years agoTroy
2 years agoClorinda
2 years ago