AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 156

Question

A company is using Amazon OpenSearch Service to implement an audit monitoring system. A developer needs to create an AWS CloudFormation custom resource that is associated with an AWS Lambda function to configure the OpenSearch Service domain. The Lambda function must access the OpenSearch Service domain by using OpenSearch Service internal master user credentials. What is the MOST secure way to pass these credentials to the Lambda function?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Use CloudFormation to create an AWS Secrets Manager secret. Use a CloudFormation dynamic reference to retrieve the secret’s value for the OpenSearch Service domain’s MasterUserOptions. Create an IAM role that has the... AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon OpenSearch Service provides managed search and log analytics. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials.

AWS Certified Developer - Associate DVA-C02 — Question 156