Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 346 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 346
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A company is building a serverless application. The application uses an API key to authenticate with a third-party application. The company wants to store the external API key as a part of an AWS Lambda configuration. The company needs to have full control over the AWS Key Management Service (AWS KMS) keys that will encrypt the API key and should be visible only to authorized entities.

Which solution will meet these requirements?

A. Store the API key in AWS Systems Manager Parameter Store as a string parameter. Use the default AWS KMS key that AWS provides to encrypt the API key.
B. Store the API key in AWS Lambda environment variables. Create an AWS KMS customer managed key to encrypt the API key.
C. Store the API key in the code repository. Use an AWS managed key to encrypt the code repository.
D. Store the API key as an Amazon DynamoDB table record. Use an AWS managed key to encrypt the API key.

Show Suggested Answer

Suggested Answer: B 🗳️

by KarBiswa at March 23, 2024, 4:37 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

KarBiswa

Highly Voted 1 year, 5 months ago

Selected Answer: B

https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption:~:text=If%20you%20prefer,on%20the%20function.

upvoted 6 times

...