AWS DevOps Engineer Professional Practice Test

What is the role of a Lambda function in the context of AWS Config custom rules?

1. To create backups of configuration data

2. To invoke changes in resource properties

3. To evaluate compliance of resources based on rule logic

4. To send notifications to AWS SNS

The correct answer is: To evaluate compliance of resources based on rule logic

In the context of AWS Config custom rules, a Lambda function is primarily used to evaluate compliance of resources based on rule logic. AWS Config allows you to create custom rules that assess whether your AWS resources comply with desired configurations. When you set up a custom rule in AWS Config, you typically associate it with a Lambda function that contains the logic for compliance evaluation. When a config rule is triggered, AWS Config invokes the associated Lambda function which checks the specified resources against the defined rule logic. The function runs checks to determine if the resources meet the compliance requirements, returning results to AWS Config for monitoring. This integration is crucial for automating compliance checks and ensuring that your resources adhere to specified policies. While other options talk about aspects of AWS functionalities, they do not pertain directly to the primary purpose of Lambda functions within AWS Config custom rules. For instance, creating backups of configuration data or invoking changes to resource properties are outside the scope of compliance evaluation. Sending notifications to AWS SNS, while useful, is not the principal function of Lambda in this specific context and does not encapsulate its role in evaluating resource compliance directly.