1Z0-997-25 Question 19
Select 2You are creating a data analytics API on Oracle Cloud Infrastructure. Your team has deployed a serverless function that processes incoming requests. You want to expose this function to external clients through an API Gateway while minimizing latency and ensuring security. Which of the following steps should you implement to achieve these goals?
- A
Create an API Gateway deployment with a route that references your function� OCID, and configure the necessary IAM policy to let API Gateway invoke the function.
- B
Allow public invocation of the function by removing all IAM policies so clients can directly call the function� endpoint without any gateway integration.
- C
Enable an API Gateway authorizer to validate client credentials or tokens before forwarding requests to the function.
- D
Manually scale the function by creating multiple replicas in different subnets to handle traffic surges.
Show answer and explanation
Correct answers: A, C
Explanation
Oracle best practices recommend exposing functions through API Gateway integrations with properly scoped IAM policies for security and ease of management. An API Gateway authorizer can authenticate and authorize traffic before invoking the function, preventing unauthorized access. Refer to the official Oracle documentation on API Gateway deployments and OCI Functions for detailed configuration steps and recommended security guidelines.
- A. Correct.
Correct. Configuring the API Gateway route to reference the function� OCID and granting the Gateway permission to invoke the function via IAM are essential for secure and streamlined invocation. This follows the standard pattern of �Allow service apigateway to use functions-family�� in your compartment.
- B. Incorrect.
Incorrect. Allowing public invocation of the function without IAM policies completely bypasses the protective capabilities of the API Gateway, leading to security risks and potentially uncontrolled costs. Oracle Functions should be invoked via the Gateway or authorized pathways.
- C. Correct.
Correct. Implementing an API Gateway authorizer lets you validate incoming requests, ensuring that only authenticated or correctly credentialed clients can call the function. This approach enhances security and enforces API access policies effectively.
- D. Incorrect.
Incorrect. Oracle Functions scale automatically based on demand, so manually creating replicas or deploying functions in multiple subnets is neither required nor recommended. Serverless functions handle scaling without manual intervention.