SAP-C02 · Question #250
A news company wants to implement an AWS Lambda function that calls an external API to receive new press releases every 10 minutes. The API provider is planning to use an IP address allow list to…
The correct answer is A. Use the Elastic IP address that is associated with the NAT gateway for the IP address allow list. C. Configure the Lambda function to launch in the private subnet of the VPC. AWS Lambda functions should not be configured to connect to public subnets. They should either be configured to use "No VPC" (in which case they can directly access the Internet), or they should be connected to private subnets (and can use a NAT Gateway or NAT).
Question
A news company wants to implement an AWS Lambda function that calls an external API to receive new press releases every 10 minutes. The API provider is planning to use an IP address allow list to protect the API, so the news company needs to provide any public IP addresses that access the API. The company's current architecture includes a VPC with an internet gateway and a NAT gateway. A solutions architect must implement a static IP address for the Lambda function. Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)
Options
- AUse the Elastic IP address that is associated with the NAT gateway for the IP address allow list.
- BAssign an Elastic IP address to the Lambda function.
- CConfigure the Lambda function to launch in the private subnet of the VPC.
- DConfigure the Lambda function to launch in the public subnet of the VPC.
- ECreate a transit gateway.
How the community answered
(46 responses)- A83% (38)
- B2% (1)
- D4% (2)
- E11% (5)
Explanation
AWS Lambda functions should not be configured to connect to public subnets. They should either be configured to use "No VPC" (in which case they can directly access the Internet), or they should be connected to private subnets (and can use a NAT Gateway or NAT).
Community Discussion
No community discussion yet for this question.