DVA-C02 · Question #360
A company is building a serverless application. The application uses an API key to authenticate with a third-party application. The company wants to store the external API key as a part of an AWS…
The correct answer is B. Store the API key in AWS Lambda environment variables. Create an AWS KMS customer. https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration- envvars-encryption:~:text=If%20you%20prefer,on%20the%20function
Question
A company is building a serverless application. The application uses an API key to authenticate with a third-party application. The company wants to store the external API key as a part of an AWS Lambda configuration. The company needs to have full control over the AWS Key Management Service (AWS KMS) keys that will encrypt the API key and should be visible only to authorized entities. Which solution will meet these requirements?
Options
- AStore the API key in AWS Systems Manager Parameter Store as a string parameter. Use the
- BStore the API key in AWS Lambda environment variables. Create an AWS KMS customer
- CStore the API key in the code repository. Use an AWS managed key to encrypt the code
- DStore the API key as an Amazon DynamoDB table record. Use an AWS managed key to encrypt
How the community answered
(25 responses)- A4% (1)
- B84% (21)
- C8% (2)
- D4% (1)
Explanation
https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration- envvars-encryption:~:text=If%20you%20prefer,on%20the%20function
Community Discussion
No community discussion yet for this question.