Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Developer - Associate · AWS
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
La respuesta correcta es C. Agregue una directiva de recursos a la función Lambda de producción para permitir que solo el depósito del entorno de producción S3 invoque la función. ¿Por qué? Cuando Amazon S3 invoca una función Lambda, la autorización se controla mediante una resource-based policy en la función Lambda, no mediante el rol de ejecución de Lambda. B. Incorrecta. Separar cuentas es una buena práctica de aislamiento, pero no es suficiente por sí sola. Además, la opción habla de permitir que cualquier bucket de la misma cuenta invoque la función, cuando el requisito es permitir únicamente el bucket de producción.
Amazon S3 can invoke a Lambda function only if the Lambda function's resource-based policy allows it. In this case, development S3 buckets are incorrectly configured to invoke the production Lambda function. This implies that the resource policy on the production Lambda function is too permissive. To fix this, you should restrict the Lambda function’s resource policy so that only the production S3 bucket has permission to invoke it.
Separating account can be more secure and easy but maintenance will be more hard. It is developer's role and ability to distinguish and maintain between two environments, not just splitting them because it's easy. What AWS wants as a DVA Certificate Member is not a person who splits the accounts because its easy , but is able to use IAM properly.