A company’s policies require that code be validated to ensure that the code has not been altered before invocation. A security engineer needs to update code in an AWS Lambda function. The developer has finalized the code and has stored the code in an Amazon S3 bucket. Which combination of steps should the security engineer take to meet these requirements? (Choose two.)

Topic #: - All AWS Certified Security - Specialty Questions

A. Deploy the new code in a zip file to the S3 bucket.
B. Invoke a signing job by using AWS Signer. Deploy the new signed code to the Lambda function.
C. Use AWS Key Management Service (AWS KMS) to encrypt the code.
D. Analyze the code with Amazon CodeGuru.
E. Store all passwords in AWS Secrets Manager.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Reference Material:

Suggested Answer:

Reference Material:

Share this post

Join the Discussion