Answer-first summary for fast verification
Answer: Using an AWS KMS customer managed key to encrypt the API key stored as a Lambda environment variable.
The correct answer is A. Storing the API key as a Lambda environment variable using an AWS Key Management Service (AWS KMS) customer-managed key ensures that the API key remains encrypted at rest. AWS KMS provides robust encryption for sensitive data, and using it to encrypt environment variables integrates seamlessly with Lambda functions. The API key can then be accessed by the Lambda function when needed without exposing it in plaintext.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
How can a developer securely provide an API key to an AWS Lambda function for third-party authentication while ensuring the key is encrypted at rest?
A
Using an AWS KMS customer managed key to encrypt the API key stored as a Lambda environment variable.
B
Prompting the user to input the password for the Lambda function during the initial run.
C
Embedding the API key directly within the application code.
D
Utilizing Lambda@Edge and ensuring all communications are secured via HTTPS.