SCS-C02 · Question #343
A company has set up the following structure to ensure that their S3 buckets always have logging enabled If there are any changes to the configuration to an S3 bucket, a config rule gets checked. If…
The correct answer is B. The AWS Lambda function does not have appropriate permissions for the bucket. The most probable cause is that you have not allowed the Lambda functions to have the appropriate permissions on the S3 bucket to make the relevant changes. Option A is invalid because this is more of a permission instead of a configuration rule issue. Option C is invalid…
Question
A company has set up the following structure to ensure that their S3 buckets always have logging enabled If there are any changes to the configuration to an S3 bucket, a config rule gets checked. If logging is disabled , then Lambda function is invoked. This Lambda function will again enable logging on the S3 bucket. Now there is an issue being encoutered with the entire flow. You have verified that the Lambda function is being invoked. But when logging is disabled for the bucket, the lambda function does not enable it again. Which of the following could be an issue?
Options
- AThe AWS Config rule is not configured properly
- BThe AWS Lambda function does not have appropriate permissions for the bucket
- CThe AWS Lambda function should use Node.js instead of python.
- DYou need to also use the API gateway to invoke the lambda function
How the community answered
(26 responses)- A4% (1)
- B77% (20)
- C4% (1)
- D15% (4)
Explanation
The most probable cause is that you have not allowed the Lambda functions to have the appropriate permissions on the S3 bucket to make the relevant changes. Option A is invalid because this is more of a permission instead of a configuration rule issue. Option C is invalid because changing the language will not be the core solution. Option D is invalid because you don't necessarily need to use the API gateway service https://docs.aws.amazon.com/lambda/latest/ds/accessing-resources.html
Topics
Community Discussion
No community discussion yet for this question.