A DevOps Engineer Is Building a Centralized CI/CD Pipeline Using

question 297

Multiple Choice

A DevOps engineer is building a centralized CI/CD pipeline using AWS CodeBuild, AWS CodeDeploy, and Amazon S3. The engineer is required to have least privilege access and individual encryption at rest for all artifacts in Amazon S3. The engineer must be able to prune old artifacts without the ability to download or read them. The engineer has already completed the following steps: Created a unique AWS Key Management Service (AWS KMS) CMK and S3 bucket for each project's builds. Updated the S3 bucket policy to only allow uploads that use the associated KMS encryption. Which final step should be taken to meet these requirements?

• A) Update the attached IAM policies to allow access to the appropriate KMS key from the CodeDeploy role where the application will be deployed.
• B) Update the attached IAM policies to allow access to the appropriate KMS key from the EC2 instance roles where the application will be deployed.
• C) Update the CMK's key policy to allow access to the appropriate KMS key from the CodeDeploy role where the application will be deployed.
• D) Update the CMK's key policy to allow access to the appropriate KMS key from the EC2 instance roles where the application will be deployed.

---

Definitions:

Monitor

An electronic visual display for computers, which may include touchscreen capabilities, LED, or LCD technologies.

Image-Editing Programs

Software tools designed for modifying or improving digital images through techniques like cropping, adjusting brightness, and applying filters.

Video Editing

The process of manipulating video images to create a new work, involving tasks such as cutting, adding effects, and rearranging sequences.

3D Building Models

Digital or physical models representing the architectural design of a building in three dimensions, used for visualization, design, and simulation purposes.