AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 550

Question

A company is using AWS Key Management Service (AWS KMS) keys to encrypt AWS Lambda environment variables. A solutions architect needs to ensure that the required permissions are in place to decrypt and use the environment variables. Which steps must the solutions architect take to implement the correct permissions? (Choose two.)

Accepted Answer

Correct answer: B, D. The correct answer is B, D. Option B: Add AWS KMS permissions in the Lambda execution role. Option D: Allow the Lambda execution role in the AWS KMS key policy. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 550