DOP-C02 Question 61
Single answerYour organization uses AWS CodePipeline to automate the deployment of applications. A recent compliance requirement mandates that any changes to production must be approved by a specific team before deployment. How can you meet this requirement while ensuring the pipeline remains automated and secure?
- A
Add an AWS Lambda function in the CodePipeline that triggers approval via an external email notification system.
- B
Integrate an AWS CodeBuild action in the pipeline to pause and wait for manual approval.
- C
Use a Manual Approval action in the CodePipeline and configure the required team as approvers.
- D
Configure AWS CodePipeline to call an AWS Step Functions workflow for approval handling.
Show answer and explanation
Correct answer: C
Explanation
The Manual Approval action in AWS CodePipeline is the most appropriate solution for integrating compliance-mandated approvals into an automated deployment pipeline. It allows you to specify approvers and ensures that the pipeline pauses until the required approval is provided. This approach maintains automation and adheres to compliance requirements securely and efficiently.
- A. Incorrect.
Using an AWS Lambda function to send email notifications may notify the team, but it does not provide a secure or integrated way to enforce approval within the pipeline.
- B. Incorrect.
AWS CodeBuild is designed for building and testing code, not for handling manual approvals. This approach does not fulfill the requirement.
- C. Correct.
The Manual Approval action in AWS CodePipeline is specifically designed for scenarios requiring human intervention, such as compliance approvals. You can assign the specific team to approve changes securely.
- D. Incorrect.
While AWS Step Functions can manage workflows, this approach adds unnecessary complexity for a simple approval process, and it is not natively integrated with CodePipeline for this use case.