Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 213 discussion

- A: The function needs outbound access to DB and the DB needs to allow inbound access from the function - E: The function needs AWSLambdaVPCAccessExecutionRole role to work correctly in the VPC (https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html#vpc-permissions) D is incorrect as the function’s execution role does not need to make any of those DB actions: Describe Modify and DescribeDB security groups!

I believe It's A and D. Unsure on A, but D seems to be confirmed by this link: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/lambda-rds-connect.html

AE is the correct answer.

A. Check that the function’s security group has outbound access on port 1433 to the DB instance’s security group. Ensure that the DB instance’s security group has inbound access on port 1433 from the function’s security group. This setup allows the Lambda function to initiate a connection to the DB instance through the specified port. E. Check that the function’s execution role permissions include ec2:CreateNetworkInterface, ec2:DescribeNetworkInterfaces, and ec2:DeleteNetworkInterface. These permissions are necessary for the Lambda function to create, manage, and clean up the network interfaces that allow it to connect to resources within a VPC, including the RDS instance​​.

https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html#vpc-permissions

AE This is a network issue, not a governance issue, hence D is invalid. Between A and B its an obvious choice. C is invalid - DB is in a private subnet

ChatGPT goes with A and D

inbound and outbound connection between Lambda and the RDS should be set properly.

https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html#vpc-permissions

Agree with Kaes - A: The function needs outbound access to DB and the DB needs to allow inbound access from the function - E: The function needs AWSLambdaVPCAccessExecutionRole role to work correctly in the VPC (https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html#vpc-permissions) D is incorrect as the function’s execution role does not need to make any of those DB actions: Describe Modify and DescribeDB security groups!

We need connection between lambda and RDS, not to VPC. So, option E is unsuitable. We can choose the related remain option like D About option A, it's already correct.

A and D

A and B