A DevOps Engineer Is Building a Centralized CI/CD Pipeline Using

question 297

Multiple Choice

A DevOps engineer is building a centralized CI/CD pipeline using AWS CodeBuild, AWS CodeDeploy, and Amazon S3. The engineer is required to have least privilege access and individual encryption at rest for all artifacts in Amazon S3. The engineer must be able to prune old artifacts without the ability to download or read them. The engineer has already completed the following steps: Created a unique AWS Key Management Service (AWS KMS) CMK and S3 bucket for each project's builds. Updated the S3 bucket policy to only allow uploads that use the associated KMS encryption. Which final step should be taken to meet these requirements?

• A) Update the attached IAM policies to allow access to the appropriate KMS key from the CodeDeploy role where the application will be deployed.
• B) Update the attached IAM policies to allow access to the appropriate KMS key from the EC2 instance roles where the application will be deployed.
• C) Update the CMK's key policy to allow access to the appropriate KMS key from the CodeDeploy role where the application will be deployed.
• D) Update the CMK's key policy to allow access to the appropriate KMS key from the EC2 instance roles where the application will be deployed.

---

Definitions:

Glucose

A basic form of sugar that serves as a crucial energy source for living beings and is found in numerous carbohydrates.

Glycogen

A multi-branched polysaccharide of glucose that serves as a form of energy storage in animals and fungi.

Liver

A vital organ in vertebrates responsible for detoxification, protein synthesis, and production of biochemicals necessary for digestion.

Muscles

Tissues in the body that have the ability to contract, allowing movement of parts of the body.