Exam AWS DevOps Engineer Professional topic 1 question 174 discussion

Exam question from Amazon's AWS DevOps Engineer Professional

Question #: 174
Topic #: 1

[All AWS DevOps Engineer Professional Questions]

During the next CodePipeline run, the pipeline exits with a FAILED state during the build stage. The DevOps engineer verifies that the correct Systems Manager parameter path is in place for the environment variable values that were changed. The DevOps engineer also validates that the environment variable type is Parameter.

Why did the pipeline fail?

A. The CodePipeline IAM service role does not have the required IAM permissions to use Parameter Store.
B. The CodePipeline IAM service role does not have the required IAM permissions to use the aws/ssm KMS key.
C. The CodeBuild IAM service role does not have the required IAM permissions to use Parameter Store.
D. The CodeBuild IAM service role does not have the required IAM permissions to use the aws/ssm KMS key.

Show Suggested Answer

Suggested Answer: C 🗳️

by Oleg_gol at Jan. 15, 2023, 12:33 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

ParagSanyashiv

2 years, 2 months ago

Selected Answer: C

C is more suitable.

upvoted 1 times

...

mgonblan

2 years, 3 months ago

A. If Codepipeline iam service role's does not have the required iam services to use parameter store it would fail in all stages of the codepipeline services. B. it's not right because the decripter is SSMM C. it looks more plausible, because codebuild service needs permissions to access to parameter store.

upvoted 1 times

...

easytoo

2 years, 3 months ago

c-c-c-c-c-c-c-c-c

upvoted 1 times

...

Bulti

2 years, 6 months ago

Answer is C. It has to be permission of the IAM Service Role of CodeBuild. It cannot be AWS/SSM Key because System Manager is supposed to decrypt secured string on behalf of the caller of System Manager to retrieve the value from the Parameter Store.

upvoted 3 times

...

Boubou480

2 years, 6 months ago

Selected Answer: C

CodePipeline uses CodeBuild to run the build stage, so the CodeBuild IAM service role is responsible for interacting with the services and resources specified in the build stage. If the role does not have the required IAM permissions to use Parameter Store, the pipeline will fail during the build stage when the CodeBuild service attempts to access the parameter values specified in the environment variables. It's a good practice to check the IAM permissions for the roles that CodePipeline, CodeBuild and CodeDeploy uses and make sure they have the correct permissions to access the services and resources that are being used in the pipeline.

upvoted 4 times

...

Oleg_gol

2 years, 6 months ago

Selected Answer: C

i vote C

upvoted 2 times

...