DVA-C02 · Question #643
A company is concerned that a malicious user could deploy unauthorized changes to the code for an AWS Lambda function. What can a developer do to ensure that only trusted code is deployed to Lambda?
The correct answer is B. Define the code signing configuration in the Lambda console. Use AWS Signer to digitally sign. AWS Lambda supports code signing by using AWS Signer and a code signing configuration. This ensures that only trusted, signed code packages can be deployed to the Lambda function, protecting against unauthorized or malicious changes.
Question
A company is concerned that a malicious user could deploy unauthorized changes to the code for an AWS Lambda function. What can a developer do to ensure that only trusted code is deployed to Lambda?
Options
- ATurn on the trusted code option in AWS CodeDeploy. Add the CodeDeploy digital certificate to
- BDefine the code signing configuration in the Lambda console. Use AWS Signer to digitally sign
- CLink Lambda to AWS KMS in the Lambda console. Use AWS KMS to digitally sign the Lambda
- DSet the KmsKeyArn property of the Lambda function to the Amazon Resource Name (ARN) of a
How the community answered
(41 responses)- A5% (2)
- B90% (37)
- C2% (1)
- D2% (1)
Explanation
AWS Lambda supports code signing by using AWS Signer and a code signing configuration. This ensures that only trusted, signed code packages can be deployed to the Lambda function, protecting against unauthorized or malicious changes.
Community Discussion
No community discussion yet for this question.