AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 346

Question

A company is building a serverless application. The application uses an API key to authenticate with a third-party application. The company wants to store the external API key as a part of an AWS Lambda configuration. The company needs to have full control over the AWS Key Management Service (AWS KMS) keys that will encrypt the API key and should be visible only to authorized entities. Which solution will meet these requirements?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Store the API key in AWS Lambda environment variables. Create an AWS KMS customer managed key to encrypt the API key. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Developer - Associate DVA-C02 — Question 346