Amazon Exam SCS-C02 Topic 8 Question 35 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 35
Topic #: 8

An Amazon API Gateway API invokes an AWS Lambda function that needs to interact with a software-as-a-service (SaaS) platform. A unique client token is generated in the SaaS platform to grant access to the Lambda function. A security engineer needs to design a solution to encrypt the access token at rest and pass the token to the Lambda function at runtime.

Which solution will meet these requirements MOST cost-effectively?

AStore the client token as a secret in AWS Secrets Manager. Use th^AWS SDK to retneve the secret in the Lambda function.

BConfigure a token-based Lambda authorizer in API Gateway.

CStore the client token as a SecureString parameter in AWS Systems Manager Parameter Store. Use the AWS SDK to retrieve the value of the SecureString parameter in the Lambda function.

DUse AWS Key Management Service (AWS KMS) to encrypt the client token. Pass the token to the Lambda function at runtime through an environment variable.

Show Suggested Answer

Suggested Answer: C

by Sheron at Sep 18, 2024, 09:59 AM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wilbert

3 months ago

I'm with the others on this one. Option C is the clear winner. Gotta love those AWS services that just work well together, am I right?

upvoted 0 times

Nana

2 months ago

Absolutely, AWS services like Parameter Store and AWS SDK work seamlessly together for a secure and efficient solution.

upvoted 0 times

...

Pete

2 months ago

I agree, using SecureString parameter in Parameter Store is a cost-effective and secure solution for storing the client token.

upvoted 0 times

...

Jeannetta

3 months ago

Option C is definitely the way to go. AWS Systems Manager Parameter Store makes it easy to securely store and retrieve sensitive data.

upvoted 0 times

...

Angella

3 months ago

I'm not sure, but I think option A could also work well by storing the token in AWS Secrets Manager.

upvoted 0 times

...

Izetta

4 months ago

Hmm, I'm not sure. Aren't there any options that involve a dancing penguin to make it more entertaining? Just kidding, Option C does seem like the most practical choice here.

upvoted 0 times

...

Beth

4 months ago

I agree, Option C is the way to go. Storing sensitive information in Secrets Manager or KMS can get expensive, especially for small use cases. Parameter Store is a great, low-cost alternative.

upvoted 0 times

Leah

3 months ago

It's good to know that there are affordable options like Parameter Store available for securing sensitive information.

upvoted 0 times

...

Colton

3 months ago

I agree, using Parameter Store for storing the client token is a smart choice to keep costs down.

upvoted 0 times

...

Willodean

3 months ago

Option C is definitely the most cost-effective solution for this scenario.

upvoted 0 times

...

Yuette

4 months ago

Option C looks like the most secure and cost-effective solution. Storing the client token as a SecureString in Parameter Store and using the AWS SDK to retrieve it in the Lambda function is a solid approach.

upvoted 0 times