DOP-C02 Question 376
Single answerYour company has a multi-account AWS environment managed using AWS Organizations. You are tasked with implementing a CI/CD pipeline for deploying serverless applications across multiple environments (dev, staging, and prod) hosted in separate AWS accounts. Security and scalability are key priorities. Which of the following approaches would best meet the requirements?
- A
Use AWS CodePipeline with cross-account roles to assume necessary permissions for each environment.
- B
Use AWS Lambda to deploy the application across accounts by directly invoking the Lambda functions in each account.
- C
Set up a shared S3 bucket for storing application artifacts and manually deploy them using AWS CloudFormation in each account.
- D
Use AWS CodeBuild to compile and deploy the application across accounts, assuming permissions for each environment.
Show answer and explanation
Correct answer: A
Explanation
AWS CodePipeline is designed for automating CI/CD workflows and supports cross-account deployments via cross-account roles, making it the most secure and scalable choice for managing deployments in a multi-account environment. Other options either lack automation, security, or proper scalability for this use case.
- A. Correct.
This is the correct approach as AWS CodePipeline supports cross-account deployments by allowing you to define cross-account roles, ensuring secure and scalable deployment of serverless applications.
- B. Incorrect.
While AWS Lambda can be used for serverless operations, directly invoking Lambda functions for cross-account deployments is not a best practice for security and scalability.
- C. Incorrect.
Manually deploying artifacts using a shared S3 bucket and AWS CloudFormation does not align with the CI/CD paradigm and lacks automation, which is critical for scalability.
- D. Incorrect.
AWS CodeBuild is primarily used for build and testing, not for orchestrating deployments across multiple accounts. It does not natively support cross-account deployments without extensive configuration.