exam questions

Exam AWS Certified Developer - Associate DVA-C02 All Questions

View all questions & answers for the AWS Certified Developer - Associate DVA-C02 exam

Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 64 discussion

A developer is migrating some features from a legacy monolithic application to use AWS Lambda functions instead. The application currently stores data in an Amazon Aurora DB cluster that runs in private subnets in a VPC. The AWS account has one VPC deployed. The Lambda functions and the DB cluster are deployed in the same AWS Region in the same AWS account.
The developer needs to ensure that the Lambda functions can securely access the DB cluster without crossing the public internet.
Which solution will meet these requirements?

  • A. Configure the DB cluster's public access setting to Yes.
  • B. Configure an Amazon RDS database proxy for he Lambda functions.
  • C. Configure a NAT gateway and a security group for the Lambda functions.
  • D. Configure the VPC, subnets, and a security group for the Lambda functions.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
jayvarma
Highly Voted 1 year, 8 months ago
Option D is the right answer. When we want the lambda to privately access the DB cluster instead of moving the traffic over the public internet, we need to have the lambda and db cluster to be in the same VPC. When we configure the VPC, subnets, and a security group for the lambda function, the lambda function will be able to communicate with the db cluster using the private IPs that are associated to the VPC. NAT gateway comes into use when you have the lambda deployed in a private subnet and you would want to provide internet access to it.
upvoted 17 times
...
gpt_test
Highly Voted 2 years ago
Selected Answer: D
Explanation: To securely access the Amazon Aurora DB cluster without crossing the public internet, the Lambda functions need to be configured to run within the same VPC as the DB cluster. This involves configuring the VPC, subnets, and a security group for the Lambda functions. This setup ensures that the Lambda functions can communicate with the DB cluster using private IP addresses within the VPC.
upvoted 8 times
...
sumanshu
Most Recent 4 months ago
Selected Answer: D
Lambda functions can be configured to run within a VPC. By assigning the Lambda functions to the same VPC and private subnets as the Aurora DB cluster, the communication remains internal to the VPC and does not cross the public internet. Configuring the security group ensures that the Lambda functions can securely connect to the Aurora DB cluster by allowing appropriate inbound/outbound rules.
upvoted 1 times
...
AmitRanchi
6 months, 3 weeks ago
Selected Answer: D
Ans is D.
upvoted 1 times
...
65703c1
11 months, 1 week ago
Selected Answer: D
D is the correct answer.
upvoted 1 times
...
Wendy1113
1 year, 5 months ago
B https://repost.aws/questions/QULXSqEPGbQx6qiyBa1D1Udg/lambda-to-db-connectivity-best-practices
upvoted 2 times
maurice2005
1 year, 1 month ago
Actually Proxy should be on the same VPC as the database and since lambda is in another vpc it doesnt have access unless a connection happens between these two vpc or just option D
upvoted 1 times
...
...
alex_heavy
1 year, 6 months ago
Selected Answer: B https://www.udemy.com/course/aws-certified-developer-associate-dva-c01/learn/lecture/36527788#overview https://aws.amazon.com/ru/blogs/compute/using-amazon-rds-proxy-with-aws-lambda/
upvoted 1 times
...
eberhe900
1 year, 9 months ago
Selected Answer: C
https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html
upvoted 2 times
ejlp
9 months, 1 week ago
After reading doc in the link that you mention, my conclusion is D NAT GW is required if Lamba in the user VPC need to access internet
upvoted 1 times
...
...
Untamables
2 years, 1 month ago
Selected Answer: D
D https://docs.aws.amazon.com/lambda/latest/dg/foundation-networking.html
upvoted 5 times
...
Dun6
2 years, 1 month ago
Selected Answer: D
D is correct, NATGateway is for when we want Lambda to access the public when it is in a private VPC
upvoted 6 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago