SOA-C02 · Question #640
A company's SysOps administrator needs to troubleshoot an AWS Lambda function that runs in a private subnet in a VPC. The company has enabled Lambda Insights logging in the Lambda environment…
The correct answer is A. Configure a VPC endpoint to direct traffic to Amazon CloudWatch Logs. When a Lambda function runs in a private subnet without public connectivity, it cannot access public endpoints by default. Since Lambda Insights sends its logs to Amazon CloudWatch Logs, the Lambda function needs network access to CloudWatch Logs. Configuring a VPC endpoint for…
Question
A company's SysOps administrator needs to troubleshoot an AWS Lambda function that runs in a private subnet in a VPC. The company has enabled Lambda Insights logging in the Lambda environment. However, there are no Lambda Insights logs for the Lambda function. The SysOps administrator has confirmed that the Lambda function's execution role has the correct permissions. The Lambda function cannot have public connectivity. What should the SysOps administrator do to make Lambda Insights logging work correctly?
Options
- AConfigure a VPC endpoint to direct traffic to Amazon CloudWatch Logs.
- BAdd an internet gateway to the VPC. Ensure that the private subnet has a route through the
- CAdd a NAT gateway to a public subnet that has access to the internet. Change the private subnet
- DChange the security group that is associated with the Lambda function to reference AWS
How the community answered
(35 responses)- A80% (28)
- B6% (2)
- C3% (1)
- D11% (4)
Explanation
When a Lambda function runs in a private subnet without public connectivity, it cannot access public endpoints by default. Since Lambda Insights sends its logs to Amazon CloudWatch Logs, the Lambda function needs network access to CloudWatch Logs. Configuring a VPC endpoint for CloudWatch Logs allows the Lambda function to send logs to CloudWatch without requiring public internet connectivity, thereby making Lambda Insights logging work correctly.
Topics
Community Discussion
No community discussion yet for this question.