SAA-C03 Q653 · Serverless

Question

A company is using an AWS Lambda function in a VPC. The Lambda function needs to access dependencies that exceed the size of the Lambda layer quota. The data that the Lambda function retrieves must be encrypted in transit. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

This solution meets every requirement:

1. **Dependencies exceed Lambda layer quota**: Lambda layers have a hard limit of 250 MB (unzipped) for all layers combined. Amazon EFS has virtually unlimited storage (petabyte-scale), so it easily accommodates large dependencies.

2. **Encryption in transit**: EFS supports **encryption in transit** using TLS. When Lambda mounts an EFS file system, it uses the EFS mount helper which supports TLS encryption by default. This satisfies the encryption-in-transit requirement natively.

3. **Lambda in a VPC**: Lambda can only mount EFS when it is configured to run in a VPC — which is already the case here. Lambda connects to EFS through an **EFS access point** via the VPC's ENI.

4. **Least operational overhead**: EFS is a fully managed, serverless-compat

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips