Glue scripts and CloudFormation are stored in Git.
Only changes that pass tests, static checks, and approval may reach production.
Which configuration is most appropriate?
Connect CodePipeline stages for CodeBuild, tests, approval, and deployment so only validated changes are promoted.
Detailed explanation
The pipeline automates validation and promotes a reviewed change through controlled stages.
The pipeline automates validation and promotes a reviewed change through controlled stages.
An IAM policy version does not package or deploy ETL code.
An IAM policy version does not package or deploy ETL code.
Audit logs record API calls but do not execute code tests.
Audit logs record API calls but do not execute code tests.
Direct overwrites make review, testing, and rollback difficult.
Direct overwrites make review, testing, and rollback difficult.
Check official documentation
Compare the following points with the official documentation.
AWS CodePipeline、CodeBuild、手動承認、CloudFormationデプロイの公式説明を確認する。
What to confirm
監査ログ・権限版管理と、コード配布パイプラインを区別できる。
Key points
- CodePipeline
- CodeBuild
- CI/CD
- Approval
Notes
- Environment: AWS公式DEA-C01試験ガイドと各サービスの公式ドキュメントの確認
- Confirm current AWS service behavior in the official DEA-C01 documentation.
Foundation review
Quality gate
Failed tests or security checks should stop promotion before production.
Immutable artifact
Promote the tested build artifact rather than rebuilding different content per environment.