SAP-C02 Question 173
Single answerA large e-commerce company uses AWS CodePipeline to manage its software release process. Due to recent incidents caused by untested changes, the company has decided to implement a stricter change management process. As part of this, they want to ensure that all changes to production environments are reviewed and approved by a designated team before deployment. Which solution best meets this requirement while maintaining an automated deployment pipeline?
- A
Add a manual approval action in the CodePipeline workflow before the deployment stage.
- B
Enable AWS Config to monitor changes and trigger automated rollbacks for unauthorized deployments.
- C
Integrate AWS Systems Manager Change Manager to approve changes before they are committed to the CodePipeline pipeline.
- D
Use AWS Trusted Advisor to flag unapproved changes and notify the operations team.
Show answer and explanation
Correct answer: A
Explanation
To implement a stricter change management process while maintaining automation, a manual approval action in CodePipeline is the best fit. This allows a designated team to review and approve changes before deployment, ensuring compliance with the new process. Other options do not directly integrate with CodePipeline to fulfill this requirement or are not designed for this use case.
- A. Correct.
This is the correct answer. Adding a manual approval action in the CodePipeline workflow ensures that a designated team can review and approve changes before they are deployed to production. It integrates seamlessly with CodePipeline and addresses the change management requirement.
- B. Incorrect.
While AWS Config can monitor changes and enforce compliance rules, it does not provide a mechanism for manual change approvals within the CodePipeline workflow. This does not directly address the requirement for a team to review and approve changes.
- C. Incorrect.
AWS Systems Manager Change Manager is used for managing operational changes, not specifically for integrating approval processes within CodePipeline workflows. It does not provide the required functionality for this scenario.
- D. Incorrect.
AWS Trusted Advisor is a monitoring and recommendation tool. While it can help identify non-compliant resources, it does not provide a mechanism for manual change approvals or integrating such approvals into CodePipeline.