A developer has code that is stored in an Amazon S3 bucket. The code must be deployed as an AWS Lambda function across multiple accounts in the same AWS Region as the S3 bucket an AWS CloudPormation template that runs for each account will deploy the Lambda function.
What is the MOST secure way to allow CloudFormaton to access the Lambda Code in the S3 bucket?

• A.Grant the CloudFormation service role the S3 ListBucket and GetObject permissions. Add a bucket policy to Amazon S3 with the principal of "AWS" (account numbers)
• B.Grant the CloudFormation service row the S3 GetObfect permission. Add a Bucket policy to Amazon S3 with the principal of "'"
• C.Use a service-based link to grant the Lambda function the S3 ListBucket and GetObject permissions by explicitly adding the S3 bucket's account number in the resource.
• D.Use a service-based link to grant the Lambda function the S3 GetObject permission Add a resource of "** to allow access to the S3 bucket.

Comment: *

Name: *

Email: *

Verification: *

A developer is building an application that uses an Amazon RDS for PostgreSQL database. To meet security requirements, the developer needs to ensure that data is encrypted at rest. The developer must be able to rotate the encryption keys on demand.

• A.Use an AWS KMS managed encryption key to encrypt the database.
• B.Create a symmetric customer managed AWS KMS key. Use the key to encrypt the database.
• C.Create a 256-bit AES-GCM encryption key. Store the key in AWS Secrets Manager, and enable managed rotation. Use the key to encrypt the database.
• D.Create a 256-bit AES-GCM encryption key. Store the key in AWS Secrets Manager. Configure an AWS Lambda function to perform key rotation. Use the key to encrypt the database.

Comment: *

Name: *

Email: *

Verification: *

A developer has created a large AWS Lambda function. Deployment of the function Is failing because of an InvalidParameterValueException error. The error message indicates that the unzipped size of the function exceeds the maximum supported value.
Which actions can the developer take to resolve this error? (Select TWO.)

• A.Use a compression algorithm that is more efficient than ZIP.
• B.Break up the function into multiple smaller functions.
• C.Zip the .zip file twice to compress the file more.
• D.Move common libraries, function dependencies, and custom runtimes into Lambda layers.
• E.Submit a quota increase request to AWS Support to increase the function to the required size.

Comment: *

Name: *

Email: *

Verification: *

A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table.
What is the simplest way to do this?

• A.Add an attribute with the expiration time; enable the Time To Live feature based on that attribute.
• B.Add an attribute with the expiration time; name the attribute ItemExpiration.
• C.Each day, create a new table to hold session data; delete the previous day's table.
• D.Write a script that deletes old records; schedule the script as a cron job on an Amazon EC2 instance.

Comment: *

Name: *

Email: *

Verification: *

An application is using Amazon Cognito user pools and identity pools for secure access. A developer wants to integrate the user-specific file upload and download features in the application with Amazon S3. The developer must ensure that the files are saved and retrieved in a secure manner and that users can access only their own files. The file sizes range from 3 KB to 300 MB.
Which option will meet these requirements with the HIGHEST level of security?

• A.Use S3 Event Notifications to validate the file upload and download requests and update the user interface (UI).
• B.Save the details of the uploaded files in a separate Amazon DynamoDB table. Filter the list of files in the user interface (UI) by comparing the current user ID with the user ID associated with the file in the table.
• C.Use Amazon API Gateway and an AWS Lambda function to upload and download files. Validate each request in the Lambda function before performing the requested operation.
• D.Use an IAM policy within the Amazon Cognito identity prefix to restrict users to use their own folders in Amazon S3.

Comment: *

Name: *

Email: *

Verification: *