AIP-C01 practice question: Event-driven integration with enterprise systems (EventBridge, API Gateway, Lambda)

Implementation and Integration A free question from our original AIP-C01 practice exam. Try it, then open the answer to see why each option is right or wrong.

A B2B software company keeps its customer accounts in a sales CRM. The CRM publishes events when an opportunity moves to the Negotiation stage, when a support case is closed and when a contract is renewed. Sales representatives need an AI-written account summary within one minute after an opportunity moves to Negotiation.

The CRM team should not need to know which summarization service consumes its events. Only the three event types above may start a summary, and a summary for one event must never be generated twice, even if the event is delivered more than once. The security team requires that the CRM publisher can only send events and cannot read or invoke anything else in the company's AWS account.

Which THREE actions meet these requirements? (Choose three.)

Choose three answers.

A. Have the CRM call a summarization Lambda function through Amazon API Gateway for every record change, and filter out the events it does not need inside that function.
B. Publish CRM events to a custom EventBridge event bus, with a rule whose pattern matches only the three event types and targets the summarization workflow.
C. Run an EventBridge scheduled rule every hour that summarizes every account whose record changed during the past hour, so that summaries are generated in batches.
D. Make the summarization step idempotent with a DynamoDB conditional write keyed on the CRM event ID, so that a redelivered event is skipped.
E. Give the CRM integration role an IAM policy that allows only events:PutEvents on the custom event bus, with no other actions in the account.
F. Set the summarization function's EventBridge target to match all events on the default event bus, and have the function ignore any event type that is not one of the three.

Show the answer and explanation

Answers: B, D, E

A. Wrong: The CRM would know about the summarizer and send every change, so it is tightly coupled and the filtering happens after each invocation. It breaks the decoupling rule and triggers the function for events that should never start a summary.
B. Right: The publisher sends to the bus without knowing the consumer, and the event pattern limits which events start a summary. Adding a new consumer later needs only a new rule on the same bus. Learn more: EventBridge rules (opens in a new tab)
C. Wrong: A rule that runs hourly delivers summaries long after the one-minute target, and it summarizes events that were never in scope. Batching is efficient, but it does not meet the timing requirement.
D. Right: Redelivered events carry the same event ID, so the conditional write rejects a second summary for that event. This prevents duplicate summaries even when EventBridge delivers an event more than once.
E. Right: The publisher can send events to the bus and nothing else, which meets the least-privilege requirement. The security team gets a clear boundary, and the summarizer's permissions stay separate from the publisher's.
F. Wrong: Matching every event starts the function for every change, even though only three types should trigger a summary. Checking types in code still incurs invocations and cost for each unwanted event.

Explanation

An EventBridge custom bus with a precise event pattern decouples the CRM from the summarizer and starts work only for the three event types. Idempotent handling by event ID prevents duplicate summaries, and an IAM policy limited to PutEvents keeps the publisher's access narrow. A direct API call, an hourly batch and an all-events rule each miss a stated requirement.

AIP-C01 practice question: Event-driven integration with enterprise systems (EventBridge, API Gateway, Lambda)

Explanation

Study

Keep practicing