Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 141 discussion

Exam question from Amazon's AWS Certified Security - Specialty SCS-C02

Question #: 141
Topic #: 1

[All AWS Certified Security - Specialty SCS-C02 Questions]

A company has a VPC that has no internet access and has the private DNS hostnames option enabled. An Amazon Aurora database is running inside the VPC. A security engineer wants to use AWS Secrets Manager to automatically rotate the credentials for the Aurora database. The security engineer configures the Secrets Manager default AWS Lambda rotation function to run inside the same VPC that the Aurora database uses. However, the security engineer determines that the password cannot be rotated properly because the Lambda function cannot communicate with the Secrets Manager endpoint.

What is the MOST secure way that the security engineer can give the Lambda function the ability to communicate with the Secrets Manager endpoint?

A. Add a NAT gateway to the VPC to allow access to the Secrets Manager endpoint.
B. Add a gateway VPC endpoint to the VPC to allow access to the Secrets Manager endpoint.
C. Add an interface VPC endpoint to the VPC to allow access to the Secrets Manager endpoint.
D. Add an internet gateway for the VPC to allow access to the Secrets Manager endpoint.

Show Suggested Answer

Suggested Answer: C 🗳️

by Zek at May 13, 2024, 9:19 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

NimiBes

1 month ago

Selected Answer: C

I think C

upvoted 1 times

...

jade290

6 months ago

Selected Answer: C

"You can establish a private connection between your VPC and Secrets Manager by creating an interface VPC endpoint." https://docs.aws.amazon.com/secretsmanager/latest/userguide/vpc-endpoint-overview.html

upvoted 3 times

...

Zek

6 months, 3 weeks ago

C Similar quesstion: https://docs.aws.amazon.com/secretsmanager/latest/userguide/vpc-endpoint-overview.html

upvoted 4 times

...