AWS Certified Developer - Associate DVA-C02 — Topic 1 Question 202

Question

A developer must provide an API key to an AWS Lambda function to authenticate with a third-party system. The Lambda function will run on a schedule. The developer needs to ensure that the API key remains encrypted at rest. Which solution will meet these requirements?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Store the API key as a Lambda environment variable by using an AWS Key Management Service (AWS KMS) customer managed key. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

AWS Certified Developer - Associate DVA-C02 — Question 202