DVA-C02 · Question #121
DVA-C02 Question #121: Real Exam Question with Answer & Explanation
The correct answer is B: Create Lambda functions inside the VPC with the AWSLambdaVPCAccessExecutionRole policy. The AWSLambdaVPCAccessExecutionRole policy allows the Lambda function to create elastic network interfaces (ENIs) in the VPC and use the security groups attached to those ENIs for controlling inbound and outbound traffic.
Question
A company is updating an application to move the backend of the application from Amazon EC2 instances to a serverless model. The application uses an Amazon RDS for MySQL DB instance and runs in a single VPC on AWS. The application and the DB instance are deployed in a private subnet in the VPC. The company needs to connect AWS Lambda functions to the DB instance. Which solution will meet these requirements?
Options
- ACreate Lambda functions inside the VPC with the AWSLambdaBasicExecutionRole policy
- BCreate Lambda functions inside the VPC with the AWSLambdaVPCAccessExecutionRole policy
- CCreate Lambda functions with the AWSLambdaBasicExecutionRole policy attached to the
- DCreate Lambda functions with the AWSLambdaVPCAccessExecutionRole policy attached to the
Explanation
The AWSLambdaVPCAccessExecutionRole policy allows the Lambda function to create elastic network interfaces (ENIs) in the VPC and use the security groups attached to those ENIs for controlling inbound and outbound traffic.
Community Discussion
No community discussion yet for this question.