Q89 — AWS SAA-C03 Ch.10

Question 89 of 100 | ← Chapter 10

Q689. A company's ecommerce website has unpredictable traffic and uses AWS Lambda functions to directly access a private Amazon RDS for PostgreSQL DB instance. The company wants to maintain predictable database performance and ensure that the Lambda invocations do not overload the database with too many connections.What should a solutions architect do to meet these requirements?

Correct Answer: B. Point the client driver at an RDS proxy endpoint. Deploy the Lambda functions inside a VPC

Explanation

To maintain predictable database performance and avoid overloading the database with too many connections when using AWS Lambda functions to access a private Amazon RDS for PostgreSQL DB instance, a solutions architect should:B. Point the client driver at an RDS proxy endpoint and deploy the Lambda functions inside a VPC.Option B is the most suitable solution for meeting the requirements:- Point the client driver at an RDS proxy endpoint: RDS Proxy acts as an intermediary between the Lambda functions and the RDS database. It manages the connection pooling and provides a stable endpoint for the Lambda functions to connect to. By pointing the client driver at the RDS proxy endpoint, you can control the number of connections and maintain predictable database performance.- Deploy the Lambda functions inside a VPC: Placing the Lambda functions inside a VPC allows them to access the RDS database securely and directly. This ensures that the Lambda invocations are within the same network as the RDS instance, reducing latency and improving performance.Option A, pointing the client driver at an RDS custom endpoint and deploying the Lambda functions inside a VPC, is not the recommended approach because it does not provide the connection pooling capabilities and scalability benefits of using RDS Proxy.Option C, pointing the client driver at an RDS custom endpoint and deploying the Lambda functions outside a VPC, may not provide the necessary network isolation and security for accessing the private RDS database.Option D, pointing the client driver at an RDS proxy endpoint and deploying the Lambda functions outside a VPC, may not provide the required network connectivity and security for accessing the private RDS database.Therefore, the best approach is B: Point the client driver at an RDS proxy endpoint and deploy the Lambda functions inside a VPC. This ensures predictable database performance, controls the number of connections, and provides secure access to the private RDS database from the Lambda functions.