A company uses AWS Lambda functions in a private subnet in a VPC to run...

Vendor: Amazon Web Services
Product: SAA-C03
Update on: Dec 31, 2025
Questions: 670

Amazon Web Services SAA-C03 Question Answer

A company uses AWS Lambda functions in a private subnet in a VPC to run application logic. The Lambda functions must not have access to the public internet. Additionally, all data communication must remain within the private network. As part of a new requirement, the application logic needs access to an Amazon DynamoDB table.

What is the MOST secure way to meet this new requirement?

Provision the DynamoDB table inside the same VPC that contains the Lambda functions.

Create a gateway VPC endpoint for DynamoDB to provide access to the table.

Use a network ACL to only allow access to the DynamoDB table from the VPC.

Use a security group to only allow access to the DynamoDB table from the VPC.