AWS Certified Developer Associate · Free Practice Question Medium
Question 29
A developer needs to troubleshoot an AWS Lambda function in a development environment. The Lambda function is configured in VPC mode and needs to connect to an existing Amazon RDS for SQL Server DB instance. The DB instance is deployed in a private subnet and accepts connections by using port 1433. When the developer tests the function, the function reports an error when it tries to connect to the database. Which combination of steps should the developer take to diagnose this issue? (Choose two.)
- A Check that the VPC is set up for a NAT gateway. Check that the DB instance has the public access option turned on.
- B Check that the function’s security group has inbound access on port 1433 from the DB instance’s security group. Check that the DB instance’s security group has outbound access on port 1433 to the function’s security group.
- C Check that the function’s security group has outbound access on port 1433 to the DB instance’s security group. Check that the DB instance’s security group has inbound access on port 1433 from the function’s security group.
- D Check that the function’s execution role permissions include ec2:CreateNetworkInterface, ec2:DescribeNetworkInterfaces, and ec2:DeleteNetworkInterface.
- E Check that the function’s execution role permissions include rds:DescribeDBInstances, rds:ModifyDBInstance. and rds:DescribeDBSecurityGroups for the DB instance.
Reveal correct answers
Correct answers: A, C
Explanation
To diagnose the issue with the AWS Lambda function connecting to the Amazon RDS for SQL Server DB instance, the developer should take the following steps: 1. Check that the function’s security group has outbound access on port 1433 to the DB instance’s security group. 2. Check that the DB instance’s security group has inbound access on port 1433 from the function’s security group. These steps ensure that the necessary network permissions are in place for the Lambda function to communicate with the RDS instance.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
