AWS SAP-C02 · Question 72 · Domain 2.1: Deployment Strategy
An architect is designing a serverless application using AWS Lambda. The function needs to access a database hosted in a private subnet of a VPC. When the Lambda function is attached to the VPC, it loses internet access and can no longer call the AWS Systems Manager Parameter Store API. How can this be fixed MOST securely?
Answer options:
Attach an Elastic IP to the Lambda function.
Move the Lambda function to a public subnet.
Create a VPC Interface Endpoint (AWS PrivateLink) for Systems Manager in the private subnet.
Deploy a NAT Gateway in the private subnet.
75 questions · hints · full answers · grading