AWS Certified Solutions Architect Associate Practice Tests 2019: 390 AWS Practice Exam Questions With Answers & Detailed Explanations by Neal Davis

Author:Neal Davis [Davis, Neal]
Language: eng
Format: epub
ISBN: 9781079185720
Google: nK9WxwEACAAJ
Amazon: B07V5RLQFY
Publisher: Independently Published
Published: 2019-07-07T22:00:00+00:00

There is no need to make any changes as all environment variables are encrypted by default with AWS Lambda

Use encryption helpers that leverage AWS Key Management Service to store the sensitive information as Ciphertext

Store the environment variables in an encrypted DynamoDB table and configure Lambda to retrieve them as required

This cannot be done, only the environment variables that relate to the Lambda function itself can be encrypted

Answer: 2

Explanation:

Environment variables for Lambda functions enable you to dynamically pass settings to your function code and libraries, without making changes to your code. Environment variables are key-value pairs that you create and modify as part of your function configuration, using either the AWS Lambda Console, the AWS Lambda CLI or the AWS Lambda SD. You can use environment variables to help libraries know what directory to install files in, where to store outputs, store connection and logging settings, and more

When you deploy your Lambda function, all the environment variables you've specified are encrypted by default after, but not during, the deployment process. They are then decrypted automatically by AWS Lambda when the function is invoked. If you need to store sensitive information in an environment variable, we strongly suggest you encrypt that information before deploying your Lambda function. The Lambda console makes that easier for you by providing encryption helpers that leverage AWS Key Management Service to store that sensitive information as Ciphertext

The environment variables are not encrypted throughout the entire process so there is a need to take action here. Storing the variables in an encrypted DynamoDB table is not necessary when you can use encryption helpers

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.