CodeBuild creates a ZIP package for a deployment stage.
Use the same artifact in every environment instead of rebuilding it and reduce tampering risk.
Which setting is most appropriate?
Configure a CodePipeline artifact store so the build output is preserved and consumed by later stages.
Detailed explanation
A CDN cache is not a controlled CI/CD artifact repository.
A CDN cache is not a controlled CI/CD artifact repository.
DNS records do not store build artifacts.
DNS records do not store build artifacts.
A stored build artifact can be consumed by later stages without rebuilding it for each environment.
A stored build artifact can be consumed by later stages without rebuilding it for each environment.
Independent builds can differ and reduce deployment reproducibility.
Independent builds can differ and reduce deployment reproducibility.
Check official documentation
Compare the following points with the official documentation.
AWS CodePipeline artifact storeの公式説明を確認する。
What to confirm
ソース、ビルド成果物、デプロイ入力の流れを説明できる。
Key points
- Artifact store
- CodeBuild
- CodePipeline
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Reproducibility
Using one stored artifact prevents environment-specific rebuild differences.
Promotion
The same tested output can be promoted through stages rather than recreated.