SAP-C02 Question 315

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Deploying the API to multiple Regions (A) allows the company's API to run across multiple Regions, meeting one of the requirements. Creating a new KMS multi-Region customer managed key (B) ensures that the encryption keys used to store the vendor's API secret are accessible across multiple Regions. This allows the company to use a single secret in Secrets Manager across all Regions, reducing operational overhead. Replicating the existing Secrets Manager secret to other Regions (C) is not necessary if you have an AWS-managed key or a multi-region customer managed key (B), but it's still a valid option that can meet the requirement. In fact, the combination of A, B, and C would be the most suitable answer, as they all contribute to ensuring that the API components can run across multiple Regions in an active-active configuration with minimal operational overhead.

• 2

  BCF "A" does not create the Lambda in other regions. " The API uses Amazon API Gateway with a Regional API endpoint and an AWS Lambda function for hosting. "

• 1

  Why C? Does the new KMS key not need to create a new encrypted secret?