AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 406

Question

A SysOps administrator is re-architecting an application. The SysOps administrator has moved the database from a public subnet, where the database used a public endpoint, into a private subnet to restrict access from the public network. After this change, an AWS Lambda function that requires read access to the database cannot connect to the database. The SysOps administrator must resolve this issue without compromising security. Which solution meets these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create an AWS PrivateLink interface endpoint for the Lambda function. Connect to the database using its private endpoint. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS PrivateLink exposes services privately inside the VPC without internet exposure.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 406