DVA-C02 Question 106

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  B: This option ensures that the Lambda functions have the necessary permissions to access resources within the VPC and that the RDS security group is configured to allow inbound access from the Lambda functions. D: Reason for eliminating this is creating an interface VPC endpoint and configuring the endpoint policy is unnecessary for this scenario as it complicates the setup without addressing the VPC access requirements directly.

• 1

  D) Eliminated - lambda:InvokeFunction permissions relate to calling Lambda functions, not connecting to a database.

• Chose B2

  Lambda functions need to run inside the VPC to access resources like the RDS instance, which is located within the private subnet. The AWSLambdaVPCAccessExecutionRole policy is required for Lambda functions to connect to resources inside a VPC. This policy allows Lambda functions to use Elastic Network Interfaces (ENIs) to connect to the VPC. The security group associated with the RDS instance must allow inbound connections from the Lambda function's security group.