DOP-C02 · Question #205
DOP-C02 Question #205: Real Exam Question with Answer & Explanation
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #205. The question stem and answer options stay visible for context.
Question
A company's application teams use AWS CodeCommit repositories for their applications. The application teams have repositories in multiple AWS accounts. All accounts are in an organization in AWS Organizations. Each application team uses AWS IAM Identity Center (AWS Single Sign-On) configured with an external IdP to assume a developer IAM role. The developer role allows the application teams to use Git to work with the code in the repositories. A security audit reveals that the application teams can modify the main branch in any repository. A DevOps engineer must implement a solution that allows the application teams to modify the main branch of only the repositories that they manage. Which combination of steps will meet these requirements? (Choose three.)
Options
- AUpdate the SAML assertion to pass the user's team name. Update the IAM role's trust policy to
- BCreate an approval rule template for each team in the Organizations management account.
- CCreate an approval rule template for each account. Associate the template with all repositories.
- DFor each CodeCommit repository, add an access-team tag that has the value set to the name of
- EE. Attach an SCP to the accounts. Include the following statement:
- FCreate an IAM permissions boundary in each account. Include the following statement:
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.