SAA-C03 Q163 · Serverless

Question

A manufacturing company runs an order processing application in its VPC. The company wants to securely send messages from the application to an external Salesforce system that uses Open Authorization (OAuth). A solutions architect needs to integrate the company's order processing application with the external Salesforce system. Which solution will meet these requirements?

Accepted Answer

**Answer C** is correct because Amazon EventBridge API Destinations is purpose-built for this exact use case:

1. **OAuth Requirement**: EventBridge API Destinations natively support **OAuth client credentials**, API key, and Basic authentication. When you create a Connection in EventBridge, you configure the OAuth endpoint, client ID, and client secret. EventBridge automatically handles token retrieval, caching, and refresh — no custom code needed.

2. **External SaaS Integration**: EventBridge has a concept of **SaaS partner integrations** and **API Destinations** specifically designed to send events to external HTTP endpoints like Salesforce. This is a managed, serverless way to integrate with third-party APIs.

3. **Security**: The OAuth credentials are stored securely in AWS Secrets M

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips