AWS Certified Developer Associate
CERTIFICATION PAPER 2026 FULL
SOLUTION GRADED A+
● A company is migrating a web service that accepts requests using
HTTP (port 80) to the AWS Cloud. The company wants to use an AWS
Lambda function to process HTTP requests.
Which application design would satisfy these requirements?
A.Create an Amazon API Gateway API and configure proxy integration
with the Lambda function.
B.Create an Amazon API Gateway API and configure non-proxy
integration with the Lambda function.
C.Configure the Lambda function as a target in the Application Load
Balancer target group.
D.Make the Lambda function listen to inbound network connections on
port 80.. Answer: A.Create an Amazon API Gateway API and configure
proxy integration with the Lambda function.
● A company wants to store sensitive user data in Amazon S3 and
encrypt this data at rest. The company must manage the encryption keys
themselves and use Amazon S3 to perform the encryption.
How can a developer meet these requirements?
, A.Enable default encryption for the S3 bucket using a customer-
provided keys option.
B.Provide a private encryption key when uploading an object to the S3
bucket.
C.Provide a public encryption key when uploading an object to the S3
bucket.
D.Provide a symmetric encryption key when uploading an object to the
S3 bucket.. Answer: B.Provide a private encryption key when uploading
an object to the S3 bucket.
● A company is developing a Python application that submits data to an
Amazon DynamoDB table. The company requires client-side encryption
of specific data items and end-to-end protection for the encrypted data in
transit and at rest.
Which combination of steps will meet the requirement for encryption of
specific data items? (Select TWO.)
A.Generate symmetric encryption keys with AWS KMS.
B.Generate asymmetric encryption keys with AWS KMS.
C.Use generated keys with the DynamoDB Encryption Client.
D.Use generated keys to configure DynamoDB table encryption using
AWS-managed customer master keys (CMKs).
E.Use generated keys to configure DynamoDB table encryption using
AWS-owned customer master keys (CMKs).. Answer:
CERTIFICATION PAPER 2026 FULL
SOLUTION GRADED A+
● A company is migrating a web service that accepts requests using
HTTP (port 80) to the AWS Cloud. The company wants to use an AWS
Lambda function to process HTTP requests.
Which application design would satisfy these requirements?
A.Create an Amazon API Gateway API and configure proxy integration
with the Lambda function.
B.Create an Amazon API Gateway API and configure non-proxy
integration with the Lambda function.
C.Configure the Lambda function as a target in the Application Load
Balancer target group.
D.Make the Lambda function listen to inbound network connections on
port 80.. Answer: A.Create an Amazon API Gateway API and configure
proxy integration with the Lambda function.
● A company wants to store sensitive user data in Amazon S3 and
encrypt this data at rest. The company must manage the encryption keys
themselves and use Amazon S3 to perform the encryption.
How can a developer meet these requirements?
, A.Enable default encryption for the S3 bucket using a customer-
provided keys option.
B.Provide a private encryption key when uploading an object to the S3
bucket.
C.Provide a public encryption key when uploading an object to the S3
bucket.
D.Provide a symmetric encryption key when uploading an object to the
S3 bucket.. Answer: B.Provide a private encryption key when uploading
an object to the S3 bucket.
● A company is developing a Python application that submits data to an
Amazon DynamoDB table. The company requires client-side encryption
of specific data items and end-to-end protection for the encrypted data in
transit and at rest.
Which combination of steps will meet the requirement for encryption of
specific data items? (Select TWO.)
A.Generate symmetric encryption keys with AWS KMS.
B.Generate asymmetric encryption keys with AWS KMS.
C.Use generated keys with the DynamoDB Encryption Client.
D.Use generated keys to configure DynamoDB table encryption using
AWS-managed customer master keys (CMKs).
E.Use generated keys to configure DynamoDB table encryption using
AWS-owned customer master keys (CMKs).. Answer:
