A Solutions Architect Is Designing a Two-Tiered Architecture That Has

A solutions architect is designing a two-tiered architecture that has separate private subnets for compute resources and the database. An AWS Lambda function that is deployed in the compute subnets needs connectivity to the database. Which solution will provide this connectivity in the MOST secure way?

A) Configure the Lambda function to use Amazon RDS Proxy outside the VPC.
B) Associate a security group with the Lambda function. Authorize this security group in the database's security group.
C) Authorize the compute subnet's CIDR ranges in the database's security group.
D) During the initialization phase, authorize all IP addresses in the database's security group temporarily. Remove the rule after the initialization is complete.