Amazon
SOA-C02 · Question #639
A SysOps administrator needs to give an existing AWS Lambda function access to an existing Amazon S3 bucket. Traffic between the Lambda function and the S3 bucket must not use public IP addresses. The
Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #639. The question stem and answer options stay visible for context.
Submitted by yuriko_h· Mar 30, 2026Networking and Content Delivery
Question
A SysOps administrator needs to give an existing AWS Lambda function access to an existing Amazon S3 bucket. Traffic between the Lambda function and the S3 bucket must not use public IP addresses. The Lambda function has been configured to run in a VPC. Which solution will meet these requirements?
Options
- AConfigure VPC sharing between the Lambda VPC and the S3 bucket.
- BAttach a transit gateway to the Lambda VPC to allow the Lambda function to connect to the S3
- CCreate a NAT gateway. Associate the NAT gateway with the subnet where the Lambda function
- DCreate an S3 interface endpoint. Change the Lambda function to use the new S3 DNS name.
Unlock SOA-C02 to see the answer
You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#VPC endpoint#S3 interface endpoint#Lambda VPC#private connectivity