An energy utility company is modernizing its smart grid meter data ingestion API on AWS. The system must process high-frequency periodic telemetry reports sent from millions of IoT smart meters. During peak hours, the volume of telemetry data spikes drastically. The backend processing logic is implemented using AWS Lambda functions triggered by Amazon API Gateway endpoints. The Lambda functions perform lightweight validation and write directly to an Amazon RDS PostgreSQL database located in a private VPC subnet. The company requires a secure, highly available architecture that prevents database connection exhaustion during peak traffic periods and ensures that the smart grid ingestion workload does not starve other critical administrative workloads of Lambda compute resources in the same AWS region. Which TWO actions should the Solutions Architect take to design a solution that meets these requirements?
- Configure Amazon RDS Proxy between the Lambda functions and the RDS PostgreSQL database to manage and reuse the database connections.Cevap
- Configure reserved concurrency on the smart grid ingestion Lambda functions to restrict the maximum number of concurrent executions they can consume.Cevap
- CConfigure provisioned concurrency on the smart grid ingestion Lambda functions to scale dynamically up to the regional account execution limit.
- DDeploy a single NAT Gateway in one Availability Zone to route all outbound database traffic from the Lambda functions to the private RDS subnet.
- EEncrypt the database connections using the AWS-managed KMS key (aws/rds) to enable external administrative Lambda functions in a different AWS account to securely query the database.