Question

You've developed a set of scripts using AWS Lambda. These scripts need to access EC2 Instances in a VPC. Which of the following needs to be done to ensure that the AWS Lambda function can access the resources in the VPC? Choose 2 answers from the options given below.

A. Ensure that the subnet ID’s are configured in the Lambda function.

B. Ensure that the NACL ID’s are configured in the Lambda function.

C. Ensure that the Security Group ID’s are configured in the Lambda function.

D. Ensure that the VPC Flow Log ID’s are configured in the Lambda function.

Answer 1

Answer - A and C.

Options B and D are incorrect since you have to mention the Subnet and Security IDs for the Lambda function to access the resources in the VPC.The AWS Documentation mentions the following.

You can enable AWS Lambda to access resources in a Virtual Private Cloud (VPC)

Your Lambda functions can now access Amazon RDS databases, Amazon Redshift data warehouses, Amazon ElasticCache nodes, and other endpoints that are accessible only from within a particular VPC (e.g., web service running on EC2)

You must provide additional VPC-specific configuration information such as VPC subnet IDs and security group IDs in order to enable your Lambda functions to access resources in an Amazon VPC.