ExamPark
Course menuDEA-C01

Exams / DEA-C01 / Data APIs and source connections / Question 1

DEA-C01 practice question: Data APIs and source connections

Data Ingestion and Transformation A free question from our original DEA-C01 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A weather-data company collects readings from 40 partner organizations, which push JSON records over HTTPS. The records must land in an existing Amazon Kinesis Data Streams stream that several consumers already read.

Partners must call one HTTPS endpoint and must not hold AWS credentials. The company does not want to run servers or write code to receive the requests, and each partner must be throttled to its own request rate.

Which solution meets these requirements?

Choose one answer.

  1. A. Create an IAM user for each partner with kinesis:PutRecord on the stream, and have the partners call the Kinesis API directly with access keys.
  2. B. Run a small web service on Amazon EC2 instances behind an Application Load Balancer that writes each request to the stream.
  3. C. Create a Lambda function URL whose function writes each request to the stream, and set reserved concurrency to cap the total request rate.
  4. D. Create an API Gateway REST API with an AWS service integration that calls Kinesis PutRecord through an IAM role, and a usage plan per partner.
Show the answer and explanation

Answer: D

  • A. Wrong: Each partner would hold long-term AWS credentials, which the company has ruled out. Kinesis also has no per-caller rate limit, so one partner could still use most of the stream's write capacity.
  • B. Wrong: This works, but the company would run and patch servers and write the receiving code. Per-partner throttling would also have to be built into the service.
  • C. Wrong: A function URL avoids servers, but the team must write and maintain the function code. Reserved concurrency caps the total rate for all callers, so it cannot give each partner its own limit. Learn more: Creating and managing Lambda function URLs (opens in a new tab)
  • D. Right: Correct. An AWS service integration lets API Gateway call PutRecord itself with an execution role, so there is no code or server and partners never see AWS credentials. Usage plans with an API key per partner apply throttling and quotas per key; pair them with an authorizer, because API keys are not meant for authentication. Learn more: Create a REST API as an Amazon Kinesis proxy (opens in a new tab)

Explanation

API Gateway can act as a managed front door for a data stream: an AWS service integration calls Kinesis PutRecord directly through an IAM role, with no function or server in between. Usage plans and API keys throttle each partner separately. Direct IAM access, a web service on EC2 and a Lambda function URL each add credentials, servers, code or a single shared limit.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free DEA-C01 practice examPractice Data APIs and source connectionsAll Data APIs and source connections questions

Want more on Data APIs and source connections? The 5 full-length practice sets have 5 more Data APIs and source connections questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets