AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 507

Question

An AWS Lambda function generates a 3 MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the developer must ensure that it is encrypted before uploading to the bucket. Which of the following modifications should the developer make to ensure that the data is encrypted before uploading it to the bucket?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Use the GenerateDataKey API, then use that data key to encrypt the file in the Lambda function code. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.

AWS Certified Developer - Associate DVA-C02 — Question 507