DVA-C02 · Question #758
A developer is creating a solution to process files that users upload. The solution stores the files that users upload in an Amazon S3 bucket. The developer creates an AWS Lambda function that runs…
The correct answer is D. Use a resource-based policy to grant Amazon S3 permissions to invoke the Lambda function. In. To allow Amazon S3 to invoke a Lambda function, you must use a resource-based policy on the Lambda function. To ensure the solution continues to work even when the Lambda function is updated, reference the function using an alias ARN (e.g., arn:aws:lambda:region:account…
Question
A developer is creating a solution to process files that users upload. The solution stores the files that users upload in an Amazon S3 bucket. The developer creates an AWS Lambda function that runs every time a user uploads a new file. The Lambda function processes user files and stores the processed files in a second S3 bucket. The developer must grant Amazon S3 permissions invoke the Lambda function. The solution must work even if the developer updates the Lambda function in the future. Winch solution will meet these requirements?
Options
- AUse an identity-based policy to grant Amazon S3 permissions to invoke the Lambda function.
- BUse a resource-based policy to grant Amazon S3 permissions to invoke the Lambda function.
- CUse an identity-based policy to grant Amazon S3 permissions to invoke the Lambda function. In
- DUse a resource-based policy to grant Amazon S3 permissions to invoke the Lambda function. In
How the community answered
(64 responses)- A5% (3)
- B9% (6)
- C2% (1)
- D84% (54)
Explanation
To allow Amazon S3 to invoke a Lambda function, you must use a resource-based policy on the Lambda function. To ensure the solution continues to work even when the Lambda function is updated, reference the function using an alias ARN (e.g., arn:aws:lambda:region:account- id:function:function-name:alias-name). This way, the alias can point to the latest version without updating the S3 trigger configuration or policy each time the function is updated.
Community Discussion
No community discussion yet for this question.