AWS Certified Developer - Associate Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A2

  B) Eliminated - Placing the Lambda function in a public subnet compromises security C) Eliminated - The rule should allow traffic to SG2 (the database’s security group) from SG1 (the Lambda function’s security group), not the other way around. D) Eliminated - Adds significant operational complexity

• 2

  this one is badly written hehe I would say A, but they missed to mention that this only works securely if the secgroup is listed as destination of the rules. B would also work, but you need to properly configure it....

• 1

  Correction answer should be option C. Lambda function, configure VPC1 access, and assign separate security groups: Lambda Function: Associate the Lambda function with VPC1. Security Group (SG1): Assign SG1 to the Lambda function. Security Group (SG2): Assign a second security group (SG2) to the Aurora database. Inbound Rule: Add an inbound rule to SG1 to allow TCP traffic from Port 3306 (Aurora database port). This approach ensures proper separation of concerns and simplifies security group management.