Topic 1 Question 136
A data engineer set up an AWS Lambda function to read an object that is stored in an Amazon S3 bucket. The object is encrypted by an AWS KMS key.
The data engineer configured the Lambda function’s execution role to access the S3 bucket. However, the Lambda function encountered an error and failed to retrieve the content of the object.
What is the likely cause of the error?
The data engineer misconfigured the permissions of the S3 bucket. The Lambda function could not access the object.
The Lambda function is using an outdated SDK version, which caused the read failure.
The S3 bucket is located in a different AWS Region than the Region where the data engineer works. Latency issues caused the Lambda function to encounter an error.
The Lambda function’s execution role does not have the necessary permissions to access the KMS key that can decrypt the S3 object.
ユーザの投票
コメント(3)
- 正解だと思う選択肢: D
Option D: The Lambda function’s execution role does not have the necessary permissions to access the KMS key that can decrypt the S3 object.
👍 1matt2002024/08/14 - 正解だと思う選択肢: D
Answer is D
👍 1aragon_saa2024/08/14 - 正解だと思う選択肢: D
The correct answer is D.
Here is why:
The Lambda function is configured to access the S3 bucket: The data engineer has already set up the Lambda function's execution role to access the S3 bucket. This means that basic S3 access permissions are likely in place.
The object is encrypted with a KMS key: This is a crucial detail. When an object in S3 is encrypted with a KMS key, any entity trying to read that object needs two sets of permissions: a. Permission to access the S3 bucket and object b. Permission to use the specific KMS key for decryption
The error occurs when trying to retrieve the content: This suggests that the Lambda function can likely see the object (as it has S3 access) but fails when trying to read its contents.
To resolve this issue, the data engineer should grant the Lambda function's execution role the required KMS permissions. Specifically, add the 'kms:Decrypt' permission for the KMS key used to encrypt the S3 object.
👍 1AgboolaKun2024/11/08
シャッフルモード