Exam AWS Certified Developer Associate All Questions

View all questions & answers for the AWS Certified Developer Associate exam

Exam AWS Certified Developer Associate topic 1 question 406 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 406
Topic #: 1

[All AWS Certified Developer Associate Questions]

A company’s mock data from development environments has been appearing in the production environment. The company wants a member of the Admin IAM user group to manually approve all promotions to production in the company’s AWS CodePipeline pipeline before the promotions can proceed.

Which combination of steps will meet these requirements? (Choose two.)

A. Add an approval action to the pipeline. Set the Provider field to Group and the Owner field to the name of the IAM user group. Set the approval action to run before the production deploy action.
B. Add an approval action to the pipeline. Set the Provider field to Manual and the Owner field to AWS. Set the approval action to run before the production deploy action.
C. Add an approval action to the pipeline. Set the Provider field to Manual and the Owner field to the name of the IAM user group. Set the approval action to run before the production deploy action.
D. Add an inline policy to the Admin IAM user group to allow the codepipeline:GetPipeline* action and the codepipeline:PutApprovalResult action. Set the pipeline as the resource for the policy.
E. Add an inline policy to the Admin IAM user group to allow the codepipeline:GetPipeline* action. Set the pipeline as the resource for the policy. Add a second inline policy to allow the codepipeline:PutApprovalResult action. Set the approval action as the resource for the policy.

Show Suggested Answer

Suggested Answer: BE 🗳️

by KT_Yu at Jan. 20, 2023, 9:02 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

AWSdeveloper08

2 years, 1 month ago

Selected Answer: BD

B. Add an approval action to the pipeline. Set the Provider field to Manual and the Owner field to AWS. Set the approval action to run before the production deploy action. By setting the Owner field to AWS, any member of the Admin IAM user group will be able to perform the approval. D. Add an inline policy to the Admin IAM user group to allow the codepipeline:GetPipeline* action and the codepipeline:PutApprovalResult action. Set the pipeline as the resource for the policy. Additionally, the policy should include permissions for the codepipeline:PutApprovalResult action, enabling the group members to provide approval or rejection results for the pipeline. https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-action-add.html https://docs.aws.amazon.com/codepipeline/latest/userguide/welcome.html

upvoted 2 times

...

captainpike

2 years, 4 months ago

Selected Answer: BD

B: Check this https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-action-add.html D is better than E because you can use only 1 inline policy instead of 2

upvoted 2 times

...

davdan99

2 years, 5 months ago

Selected Answer: CD

I will go for C and D D https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-iam-permissions.html

upvoted 1 times

...

JagpreetLM10

2 years, 6 months ago

Selected Answer: CD

C. Add an approval action to the pipeline. Set the Provider field to Manual and the Owner field to the name of the IAM user group. Set the approval action to run before the production deploy action. D. Add an inline policy to the Admin IAM user group to allow the codepipeline:GetPipeline* action and the codepipeline:PutApprovalResult action. Set the pipeline as the resource for the policy.

upvoted 4 times

...

Phinx

2 years, 7 months ago

Selected Answer: BE

Changed my answer to BE upon further research.

upvoted 4 times

...

Phinx

2 years, 7 months ago

I'll go with BD. https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-action-add.html https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-iam-permissions.html

upvoted 4 times

...

breathingcloud

2 years, 7 months ago

Selected Answer: BD

Inline policy resource must reflect the pipeline

upvoted 2 times

KT_Yu

2 years, 7 months ago

remember to add the arn of manual approval to putManualApproval

upvoted 1 times

Phinx

2 years, 7 months ago

https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-iam-permissions.html

upvoted 1 times

...

KT_Yu

2 years, 7 months ago

Selected Answer: BE

Ans: B and E B: https://docs.aws.amazon.com/codepipeline/latest/userguide/reference-pipeline-structure.html E: you must as well specify the action ARN for the putApproval

upvoted 2 times

Phinx

2 years, 7 months ago

Sorry you're correct. Answer is BE.

upvoted 1 times

tieyua

2 years, 6 months ago

If you guys still around, care to explain D vs E? Seems the same to me, and with one policy, you can still specify separate resource arn if more granular restriction is needed.

upvoted 1 times

...

Phinx

2 years, 7 months ago

There's no need to create a separate inline-policy. You can specify the putApproval in the same JSON document. Thus, BD is correct.

upvoted 1 times

...