A company uses AWS Lambda functions in a private subnet in a VPC to run application logic. The Lambda functions must not have access to the public internet. Additionally, all data communication must remain within the private network. As part of a new requirement, the application logic needs access to an Amazon DynamoDB table. What is the MOST secure way to meet this new requirement?

Question

Accepted Answer

B. Create a gateway VPC endpoint for DynamoDB to provide access to the table

Answer

A. Provision the DynamoDB table inside the same VPC that contains the Lambda functions

Answer

C. Use a network ACL to only allow access to the DynamoDB table from the VPC

Answer

D. Use a security group to only allow access to the DynamoDB table from the VPC

A company uses AWS Lambda functions in a private subnet in a VPC to run application logic. The Lambda functions must not have access to the public internet. Additionally, all data communication must…

Question

Options

How the community answered

Explanation

Topics

Community Discussion