AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 791

Question

A company has AWS Lambda functions that use environment variables. The company does not want its developers to see environment variables in plaintext. Which solution will meet these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create an AWS Key Management Service (AWS KMS) key. Enable encryption helpers on the Lambda functions to use the KMS key to store and encrypt the environment variables. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 791