SCS-C02 · Question #455
SCS-C02 Question #455: Real Exam Question with Answer & Explanation
The correct answer is A: Check the role that is defined in the CloudFormation template and is passed to the Lambda. For a Lambda function to run, the execution role assigned to it must have a trust policy that allows AWS Lambda (lambda.amazonaws.com) to assume the role. This ensures that the Lambda service can use the permissions associated with that role. The execution role also needs explici
Question
A company is developing a new serverless application that uses AWS Lambda functions. The company uses AWS CloudFormation to deploy the Lambda functions. The company's developers are trying to debug a Lambda function that is deployed. The developers cannot debug the Lambda function because the Lambda function is not logging its output to Amazon CloudWatch Logs. Which combination of steps should a security engineer take to resolve this issue? (Choose two.)
Options
- ACheck the role that is defined in the CloudFormation template and is passed to the Lambda
- BCheck the execution role that is configured in the CloudFormation template for the Lambda
- CCheck the Lambda function configuration in the CloudFormation template. Ensure that the
- DCheck the resource policy that is configured in the CloudFormation template for the Lambda
- ECheck the role that the developers use to debug the Lambda function. Ensure that the role has a
Explanation
For a Lambda function to run, the execution role assigned to it must have a trust policy that allows AWS Lambda (lambda.amazonaws.com) to assume the role. This ensures that the Lambda service can use the permissions associated with that role. The execution role also needs explicit permissions to write logs to Amazon CloudWatch Logs. Without these permissions, the Lambda function cannot create or update log streams in CloudWatch, which is necessary for
Community Discussion
No community discussion yet for this question.