Salesforce Certified Heroku Architecture Designer — Question 34

Universal Containers (UC) has a Heroku Postgres database attached to a Heroku app, which is running in the Common Runtime.
What should an Architect recommend UC do to secure their database to only trusted locations?

Answer options

• A. Move the database and the app into the Private Space.
• B. Add a Trusted IP range to the Heroku Postgres configuration.
• C. Set up a VPN from the trusted locations to the app.
• D. Set up a VPC in a one-off dyno when access to Heroku Postgres is needed.

Correct answer: B

Explanation

The correct answer is B because adding a Trusted IP range directly restricts access to the Heroku Postgres database from specified IP addresses, enhancing security. Options A and C involve moving to a Private Space or setting up a VPN, which may not be necessary or as straightforward for this requirement. Option D suggests a one-off VPC, but it doesn't provide a consistent solution for securing the database access.