A Development Team Creates a Build Project in AWS CodeBuild

question 3

Multiple Choice

A Development team creates a build project in AWS CodeBuild. The build project invokes automated tests of modules that access AWS services. Which of the following will enable the tests to run the MOST securely?

• A) Generate credentials for an IAM user with a policy attached to allow the actions on AWS services. Store credentials as encrypted environment variables for the build project. As part of the build script, obtain the credentials to run the integration tests.
• B) Have CodeBuild run only the integration tests as a build job on a Jenkins server. Create a role that has a policy attached to allow the actions on AWS services. Generate credentials for an IAM user that is allowed to assume the role. Configure the credentials as secrets in Jenkins, and allow the build job to use them to run the integration tests.
• C) Create a service role in IAM to be assumed by CodeBuild with a policy attached to allow the actions on AWS services. Configure the build project to use the role created.
• D) Use AWS managed credentials. Encrypt the credentials with AWS KMS. As part of the build script, decrypt with AWS KMS and use these credentials to run the integration tests.

---

Definitions:

Rationality

The quality of being based on or in accordance with reason or logic.

Fixed Ratio

Fixed ratio refers to a schedule of reinforcement where a response is reinforced only after a specified number of responses, commonly used in behavior modification.

Reinforcement

In psychology, a process by which an individual's behavior is conditioned by rewards or punishments.

Desired Behavior

The specific actions or responses that are sought after in individuals or groups within certain contexts or scenarios.