Câu 67: AWS Certified Data Engineer - Associate DEA-C01

A company uses Amazon RDS to store transactional data. The company runs an RDS DB instance in a private subnet. A developer wrote an AWS Lambda function with default settings to insert, update, or delete data in the DB instance. The developer needs to give the Lambda function the ability to connect to the DB instance privately without using the public internet. Which combination of steps will meet this requirement with the LEAST operational overhead? (Choose two.)

1. A. Turn on the public access setting for the DB instance.
2. B. Update the security group of the DB instance to allow only Lambda function invocations on the database port.
3. C. Configure the Lambda function to run in the same subnet that the DB instance uses. — đáp án hiện tại
4. D. Attach the same security group to the Lambda function and the DB instance. Include a self-referencing rule that allows access through the database port. — đáp án hiện tại
5. E. Update the network ACL of the private subnet to include a self-referencing rule that allows access through the database port.