A Company Uses AWS CodePipeline to Manage and Deploy Infrastructure

question 118

Multiple Choice

A company uses AWS CodePipeline to manage and deploy infrastructure as code. The infrastructure is defined in AWS CloudFormation templates and is primarily comprised of multiple Amazon EC2 instances and Amazon RDS databases. The Security team has observed many operators creating inbound security group rules with a source CIDR of 0 0 0 0/0 and would like to proactively stop the deployment of rules with open CIDRs The DevOps Engineer will implement a predeptoyment step that runs some security checks over the CloudFormation template before the pipeline processes it. This check should allow only inbound security group rules with a source CIDR of 0.0.0.0/0 if the rule has the description "Security Approval Ref XXXXX (where XXXXX is a preallocated reference) . The pipeline step should fail if this condition is not met and the deployment should be blocked. How should this be accomplished?

• A) Enable a SCP in AWS Organizations. The policy should deny access to the API call Create Security GroupRule if the rule specifies 0.0.0.0/0 without a description referencing a security approval.
• B) Add an initial stage to CodePipeline called Security Check. This stage should call an AWS Lambda function that scans the CloudFormation template and fails the pipeline if it finds 0.0.0.0/0 in a security group without a description referencing a security approval.
• C) Create an AWS Config rule that is triggered on creation or edit of resource type EC2 SecurityGroup. This rule should call an AWS Lambda function to send a failure notification if the security group has any rules with a source CIDR of 0.0.0.0/0 without a description referencing a security approval.
• D) Modify the IAM role used by CodePipeline. The IAM policy should deny access.

---

Definitions:

Nursing Actions

Refers to the specific tasks or interventions that nurses perform to care for patients, which can include administering medications, wound care, and monitoring patient vital signs.

Nursing Critical Thinking Model

A framework used in nursing to enhance decision-making abilities by assessing situations, analyzing information, and evaluating outcomes for patient care.

Nursing Process

A systematic approach to nursing practice that involves assessment, diagnosis, planning, implementation, and evaluation to provide care.

Clinical Decisions

Judgments made by healthcare providers regarding the care of patients, including diagnosis, treatment, and management of conditions.