A Development Team Creates a Build Project in AWS CodeBuild

question 3

Multiple Choice

A Development team creates a build project in AWS CodeBuild. The build project invokes automated tests of modules that access AWS services. Which of the following will enable the tests to run the MOST securely?

• A) Generate credentials for an IAM user with a policy attached to allow the actions on AWS services. Store credentials as encrypted environment variables for the build project. As part of the build script, obtain the credentials to run the integration tests.
• B) Have CodeBuild run only the integration tests as a build job on a Jenkins server. Create a role that has a policy attached to allow the actions on AWS services. Generate credentials for an IAM user that is allowed to assume the role. Configure the credentials as secrets in Jenkins, and allow the build job to use them to run the integration tests.
• C) Create a service role in IAM to be assumed by CodeBuild with a policy attached to allow the actions on AWS services. Configure the build project to use the role created.
• D) Use AWS managed credentials. Encrypt the credentials with AWS KMS. As part of the build script, decrypt with AWS KMS and use these credentials to run the integration tests.

---

Definitions:

Delta

In finance, it's a ratio that compares the change in the price of an asset, usually a marketable security, to the corresponding change in the price of its derivative.

Underlying Asset

The financial asset upon which a derivative's price, such as an option or future, is based.

Net Requirements

The total demand for a product or component minus the inventory already on hand or on order, used in manufacturing and inventory management.

Gross Requirements

The total amount of materials or components needed to fulfill production or sales orders, before considering inventory on hand or scheduled receipts.