Topic 1 Question 180
2 つ選択A company is using AWS CodePipeline to deploy an application. According to a new guideline, a member of the company's security team must sign off on any application changes before the changes are deployed into production. The approval must be recorded and retained.
Which combination of actions will meet these requirements?
Configure CodePipeline to write actions to Amazon CloudWatch Logs.
Configure CodePipeline to write actions to an Amazon S3 bucket at the end of each pipeline stage.
Create an AWS CloudTrail trail to deliver logs to Amazon S3.
Create a CodePipeline custom action to invoke an AWS Lambda function for approval. Create a policy that gives the security team access to manage CodePipeline custom actions.
Create a CodePipeline manual approval action before the deployment step. Create a policy that grants the security team access to approve manual approval stages.
ユーザの投票
コメント(6)
- 正解だと思う選択肢: AE
E is for Manual Approval A is for recorded and retained
👍 2GokSK2023/12/30 - 正解だと思う選択肢: CE
C. because actions performed by the security team are api calls. And api calls go into CloudTrail, if you want to retain them we have to send them into an S3 bucket.
https://docs.aws.amazon.com/codepipeline/latest/userguide/monitoring-cloudtrail-logs.html
👍 2d262e672023/12/31 - 正解だと思う選択肢: DE
D and E is correct
👍 1PrasannaBalaji2023/12/29
シャッフルモード