Your team is developing a new Lambda function for a microservice component. You need to package and deploy the Lambda function as a container image. The container image should be built based on the python:buster image with other dependencies and libraries installed. In order to use the container image properly for the Lambda function, which of the following actions is required?

Answer options:

A.In the Dockerfile, assume the IAM role through the “aws sts assume-role” CLI for the Lambda function during runtime.
B.Install the CloudWatch Log agent in the container image for the Lambda function to forward its logs to a CloudWatch Log group.
C.Install the Amazon Elastic Container Registry (Amazon ECR) agent for the Lambda function to interact with ECR to fetch the Docker image.
D.Install the runtime interface client in the container image to make it compatible with Lambda.

Correct Answer: D
Option A is incorrect because there is no need to assume the IAM role in the Dockerfile. Users should configure the IAM role when creating the Lambda function.
Option B is incorrect because Lambda automatically forwards logs to CloudWatch Logs. Users do not need to install the CloudWatch agent in Dockerfile.
Option C is incorrect because after the Docker image has been built, users should push the image to ECR. There is no ECR agent that needs to be installed in the Docker image.
Option D is CORRECT because the container image for Lambda must implement the Lambda Runtime API that is added by the open-source runtime interface client.
References:
https://aws.amazon.com/blogs/aws/new-for-aws-lambda-container-image-support/
https://docs.aws.amazon.com/lambda/latest/dg/images-create.html