SAA-C03 · Question #639
A company has deployed infrastructure on AWS. A solutions architect wants to create an AWS Lambda function that will retrieve data from an Amazon Aurora database. The Amazon Aurora database is in a pr
The correct answer is A. Create the Lambda function. Configure VPC1 access for the function. Attach a security group. The correct approach is to place the Lambda function within the same VPC (VPC1) as the Aurora database to enable private, secure connectivity. By attaching the same security group (SG1) to both the Lambda function and the database, and allowing TCP traffic on port 3306 (the defau
Question
A company has deployed infrastructure on AWS. A solutions architect wants to create an AWS Lambda function that will retrieve data from an Amazon Aurora database. The Amazon Aurora database is in a private subnet in company’s VPC. The VPC is named VPC1. The data is relational in nature. The Lambda function needs to access the data securely. Which solution will meet these requirements?
Options
- ACreate the Lambda function. Configure VPC1 access for the function. Attach a security group
- BCreate and launch a Lambda function in a new public subnet that is in a new VPC named VPC2.
- CCreate the Lambda function. Configure VPC1 access for the function. Assign a security group
- DExport the data from the Aurora database to Amazon S3. Create and launch a Lambda function in
How the community answered
(51 responses)- A78% (40)
- B4% (2)
- C12% (6)
- D6% (3)
Explanation
The correct approach is to place the Lambda function within the same VPC (VPC1) as the Aurora database to enable private, secure connectivity. By attaching the same security group (SG1) to both the Lambda function and the database, and allowing TCP traffic on port 3306 (the default port for Aurora/MySQL) in the security group rules, the Lambda function can securely connect to the database without exposing any public endpoints or requiring VPC peering.
Community Discussion
No community discussion yet for this question.