AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 931

Question

A media company has a multi-account AWS environment in the us-east-1 Region. The company has an Amazon Simple Notification Service (Amazon SNS) topic in a production account that publishes performance metrics. The company has an AWS Lambda function in an administrator account to process and analyze log data. The Lambda function that is in the administrator account must be invoked by messages from the SNS topic that is in the production account when significant metrics are reported. Which combination of steps will meet these requirements? (Choose two.)

Accepted Answer

Correct answer: A, C. The correct answer is A, C. Option A: Create an IAM resource policy for the Lambda function that allows Amazon SNS to invoke the function. Option C: Create an IAM policy for the SNS topic that allows the Lambda function to subscribe to the topic. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 931