nerdexam
Amazon

SCS-C02 · Question #97

A company uses AWS Signer with all of the company's AWS Lambda functions. A developer recently stopped working for the company. The company wants to ensure that all the code that the developer wrote…

The correct answer is A. Revoke all versions of the signing profile assigned to the developer. https://docs.aws.amazon.com/signer/latest/developerguide/revoking.html

Submitted by yuki_2020· Mar 6, 2026Infrastructure Security

Question

A company uses AWS Signer with all of the company's AWS Lambda functions. A developer recently stopped working for the company. The company wants to ensure that all the code that the developer wrote can no longer be deployed to the Lambda functions. Which solution will meet this requirement?

Options

  • ARevoke all versions of the signing profile assigned to the developer.
  • BExamine the developer's IAM roles. Remove all permissions that grant access to Signer.
  • CRe-encrypt all source code with a new AWS Key Management Service (AWS KMS) key.
  • DUse Amazon CodeGuru to profile all the code that the Lambda functions use.

How the community answered

(50 responses)
  • A
    74% (37)
  • B
    4% (2)
  • C
    8% (4)
  • D
    14% (7)

Explanation

https://docs.aws.amazon.com/signer/latest/developerguide/revoking.html

Topics

#AWS Signer#signing profile#Lambda code signing#revocation

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice