nerdexam
Amazon

DOP-C02 · Question #125

A company uses AWS CodeArtifact to centrally store Python packages. The CodeArtifact repository is configured with the following repository policy: A development team is building a new project in an a

The correct answer is A. Create an Amazon S3 gateway endpoint. Update the route tables for the subnets that are running the D. Update the role that the CodeBuild project uses so that the role has sufficient permissions to use the. AWS CodeArtifact operates in multiple Availability Zones and stores artifact data and metadata in Amazon S3 and Amazon DynamoDB. Your encrypted data is redundantly stored across multiple facilities and multiple devices in each facility, making it highly available and highly durab

Submitted by brentm· Mar 6, 2026SDLC Automation

Question

A company uses AWS CodeArtifact to centrally store Python packages. The CodeArtifact repository is configured with the following repository policy:

A development team is building a new project in an account that is in an organization in AWS Organizations. The development team wants to use a Python library that has already been stored in the CodeArtifact repository in the organization. The development team uses AWS CodePipeline and AWS CodeBuild to build the new application. The CodeBuild job that the development team uses to build the application is configured to run in a VPC. Because of compliance requirements, the VPC has no internet connectivity. The development team creates the VPC endpoints for CodeArtifact and updates the CodeBuild buildspec.yaml file. However, the development team cannot download the Python library from the repository. Which combination of steps should a DevOps engineer take so that the development team can use CodeArtifact? (Choose two.)

Exhibit

DOP-C02 question #125 exhibit

Options

  • ACreate an Amazon S3 gateway endpoint. Update the route tables for the subnets that are running the
  • BUpdate the repository policy's Principal statement to include the ARN of the role that the CodeBuild
  • CShare the CodeArtifact repository with the organization by using AWS Resource Access Manager
  • DUpdate the role that the CodeBuild project uses so that the role has sufficient permissions to use the
  • ESpecify the account that hosts the repository as the delegated administrator for CodeArtifact in the

How the community answered

(26 responses)
  • A
    69% (18)
  • B
    8% (2)
  • C
    4% (1)
  • E
    19% (5)

Explanation

AWS CodeArtifact operates in multiple Availability Zones and stores artifact data and metadata in Amazon S3 and Amazon DynamoDB. Your encrypted data is redundantly stored across multiple facilities and multiple devices in each facility, making it highly available and highly durable. https://aws.amazon.com/codeartifact/features/ With no internet connectivity, a gateway endpoint becomes necessary to access S3.

Topics

#CodeArtifact#VPC Endpoints#IAM Permissions#CodeBuild

Community Discussion

No community discussion yet for this question.

Full DOP-C02 Practice