DVA-C02 · Question #581
A healthcare company uses AWS Amplify to host a patient management system. The system uses Amazon API Gateway to expose RESTful APIs. The backend logic of the system is handled by AWS Lambda…
The correct answer is A. Configure the Lambda function to use AWS KMS keys with the AWS Database Encryption SDK. Encrypting PII at rest and in transit before storing it in DynamoDB ensures end-to-end security. Using the AWS Database Encryption SDK with KMS keys allows the Lambda function to encrypt data before transmission, meeting security and compliance requirements.
Question
A healthcare company uses AWS Amplify to host a patient management system. The system uses Amazon API Gateway to expose RESTful APIs. The backend logic of the system is handled by AWS Lambda functions. One of the Lambda functions receives patient data that includes personally identifiable information (PII). The Lambda function sends the patient data to an Amazon DynamoDB table. The company must encrypt all patient data at rest and in transit before the data is stored in DynamoDB. Which configuration will meet these requirements?
Options
- AConfigure the Lambda function to use AWS KMS keys with the AWS Database Encryption SDK
- BUse AWS managed AWS KMS keys to encrypt the data in the DynamoDB table.
- CConfigure a DynamoDB stream on the table to invoke a Lambda function. Configure the Lambda
- DUse an AWS Step Functions workflow to transfer the data to an Amazon SQS queue. Configure a
How the community answered
(33 responses)- A55% (18)
- B12% (4)
- C27% (9)
- D6% (2)
Explanation
Encrypting PII at rest and in transit before storing it in DynamoDB ensures end-to-end security. Using the AWS Database Encryption SDK with KMS keys allows the Lambda function to encrypt data before transmission, meeting security and compliance requirements.
Community Discussion
No community discussion yet for this question.