Exam AWS Certified Database - Specialty topic 1 question 266 discussion

Exam question from Amazon's AWS Certified Database - Specialty

Question #: 266
Topic #: 1

[All AWS Certified Database - Specialty Questions]

A company uses AWS Lambda functions in a private subnet in a VPC to run application logic. The Lambda functions must not have access to the public internet. Additionally, all data communication must remain within the private network. As part of a new requirement, the application logic needs access to an Amazon DynamoDB table.

What is the MOST secure way to meet this new requirement?

A. Provision the DynamoDB table inside the same VPC that contains the Lambda functions
B. Create a gateway VPC endpoint for DynamoDB to provide access to the table
C. Use a network ACL to only allow access to the DynamoDB table from the VPC
D. Use a security group to only allow access to the DynamoDB table from the VPC

Show Suggested Answer

Suggested Answer: B 🗳️

by Sab at Nov. 30, 2022, 11:20 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Sab

Highly Voted 2 years, 6 months ago

B https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/vpc-endpoints-dynamodb.html

upvoted 8 times

...

shubhary25

Highly Voted 2 years, 5 months ago

Selected Answer: B

B. A gateway VPC endpoint

upvoted 5 times

...

Pranava_GCP

Most Recent 1 year, 9 months ago

Selected Answer: B

B. Create a gateway VPC endpoint for DynamoDB to provide access to the table https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-ddb.html "You can access Amazon DynamoDB from your VPC using gateway VPC endpoints. After you create the gateway endpoint, you can add it as a target in your route table for traffic destined from your VPC to DynamoDB."

upvoted 4 times

...

Hira101

2 years, 5 months ago

B- VPC endpoint for DynamoDB

upvoted 3 times

...