Question

A company in a highly regulated industry is building an artifact with AWS CodeBuild and AWS CodePipeline. During the build process, the company must connect to an external authenticated API. The company’s DevOps engineer must encrypt the build outputs using an AWS Key Management Service (AWS KMS) key. The external API credentials must be reset monthly. The DevOps engineer has created a new AWS KMS key. Which solution meets these requirements?

Accepted Answer

C. Store the API credentials in AWS Secrets Manager. Update the key policy for the CodeBuild IAM service role to have access to the KMS key. Set CODEBUILD_KMS_KEY_ID as the new key ID.

Answer

Store the API credentials in AWS Systems Manager Parameter Store. Update the key policy for the CodeBuild IAM service role to have access to the KMS key. Set CODEBUILD_KMS_KEY_ID as the new key ID.

Answer

Store the API credentials in AWS Systems Manager Parameter Store. Update the key policy for the CodePipeline IAM service role to have access to the KMS key. Add the key to the pipeline.

Answer

Store the API credentials in AWS Secrets Manager. Update the key policy for the CodePipeline IAM service role to have access to the KMS key. Add the key to the pipeline.