Engineering Hive
Course Home
☁️
AWS Fintech Infrastructure - Quiz
Test your knowledge with 7 questions
Question 1 of 7
medium
A Lambda function in the CDE (Cardholder Data Environment) subnet needs to call AWS KMS to decrypt a data encryption key. What is the correct network path?
A
NAT Gateway → Internet Gateway → KMS public endpoint
B
VPC Interface Endpoint for KMS — traffic stays within AWS network, never traverses the internet
C
Direct internet access from the CDE subnet
D
AWS Direct Connect to KMS
← Previous
Check Answer