DOP-C02 Question 296
Single answerYour team is managing a CI/CD pipeline using AWS CodePipeline, and you have an approval stage configured before deploying to production. Recently, you noticed that deployments are being delayed because the approval stage often requires manual intervention from multiple stakeholders. You are tasked with automating this process while ensuring that approvals are still based on strict compliance checks. Which solution should you implement?
- A
Integrate AWS Lambda with the approval stage to automatically approve based on predefined compliance rules.
- B
Replace the manual approval stage with an automatic deployment, skipping approvals entirely.
- C
Use AWS Systems Manager Automation to trigger approval workflows and notify stakeholders for manual input.
- D
Integrate AWS CodePipeline with an external tool like Jira to manage the approval process.
Show answer and explanation
Correct answer: A
Explanation
To automate the approval process while ensuring compliance, integrating AWS Lambda with the approval stage of AWS CodePipeline is the best solution. Lambda can execute custom logic to enforce compliance rules, such as verifying security checks or business conditions, and automatically approve or reject the deployment. This approach eliminates manual delays while maintaining strict oversight.
- A. Correct.
This is the correct answer. AWS Lambda can be used in the approval stage of AWS CodePipeline to automatically approve or reject a deployment based on custom compliance checks, such as security policies, automated tests, or other business rules.
- B. Incorrect.
Skipping approvals entirely would compromise the strict compliance requirements mentioned in the scenario. This option does not meet the requirements.
- C. Incorrect.
While AWS Systems Manager Automation can manage workflows, it does not offer a direct integration with AWS CodePipeline's approval stage for automating compliance checks.
- D. Incorrect.
Although integrating an external tool like Jira may help manage approvals, it would still require manual intervention and does not automate the process as required by the scenario.