DVA-C02 Question 341
Single answerYou are developing a serverless application using AWS Lambda and have integrated your code repository with AWS CodePipeline. To ensure that your code adheres to security best practices and coding standards before deployment, which AWS service should you use within your CI/CD pipeline?
- A
AWS CodeBuild
- B
AWS CodeGuru Reviewer
- C
AWS CodeDeploy
- D
AWS Lambda Insights
Show answer and explanation
Correct answer: B
Explanation
AWS CodeGuru Reviewer is the recommended service for performing automated code reviews within a CI/CD pipeline. By integrating it into your AWS CodePipeline, you can ensure that your Lambda application code adheres to security and performance best practices before deployment. Other services like AWS CodeBuild and AWS CodeDeploy address different stages of the CI/CD process but do not provide automated code analysis.
- A. Incorrect.
AWS CodeBuild is used for building and testing code, but it does not provide code analysis or recommendations for security and performance improvements.
- B. Correct.
AWS CodeGuru Reviewer is specifically designed to perform automated code reviews, offering insights into security, performance, and coding best practices. It integrates easily with CI/CD pipelines for this purpose.
- C. Incorrect.
AWS CodeDeploy is used to automate application deployment to various compute services but does not offer code analysis features.
- D. Incorrect.
AWS Lambda Insights is a monitoring and troubleshooting tool for Lambda functions, not a code analysis service.