A company uses AWS Lambda functions in a private subnet in a VPC to run application logic. The Lambda functions must not have access to the public internet. Additionally, all data communication must remain within the private network. As part of a new requirement, the application logic needs access to an Amazon DynamoDB table. What is the MOST secure way to meet this new requirement?

Topic #: - All AWS Certified Database - Specialty Questions

A. Provision the DynamoDB table inside the same VPC that contains the Lambda functions
B. Create a gateway VPC endpoint for DynamoDB to provide access to the table
C. Use a network ACL to only allow access to the DynamoDB table from the VPC
D. Use a security group to only allow access to the DynamoDB table from the VPC

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Share this post

Join the Discussion