DOP-C02 · Question #357
A company uses an HPC platform to run analysis jobs for data. The company uses AWS CodeBuild to create container images and store the images on Amazon Elastic Container Registry (Amazon ECR). The…
The correct answer is D. Use CodeBuild to build the image. Sign the image by using AWS Signer before pushing the. CodeBuild for image building: Using CodeBuild for building the images aligns with the existing workflow, minimizing changes. AWS Signer for signing: AWS Signer can be integrated to sign images before they are pushed to Amazon ECR, ensuring compliance with minimal additional…
Question
A company uses an HPC platform to run analysis jobs for data. The company uses AWS CodeBuild to create container images and store the images on Amazon Elastic Container Registry (Amazon ECR). The images are then deployed on Amazon Elastic Kubernetes Service (Amazon EKS). To maintain compliance, the company needs to ensure that the images are signed before the images are deployed on Amazon EKS. The signing keys must be rotated periodically and must be managed automatically. The company needs to track who generates the signatures. Which solution will meet these requirements with the LEAST operational effort?
Options
- AUse CodeBuild to retrieve the image that was previously pushed to Amazon ECR. Use AWS
- BUse AWS Lambda to retrieve the image that was previously pushed to Amazon ECR. Use a
- CUse AWS Lambda to retrieve the image that was previously pushed to Amazon ECR. Use AWS
- DUse CodeBuild to build the image. Sign the image by using AWS Signer before pushing the
How the community answered
(28 responses)- A11% (3)
- B21% (6)
- C4% (1)
- D64% (18)
Explanation
CodeBuild for image building: Using CodeBuild for building the images aligns with the existing workflow, minimizing changes. AWS Signer for signing: AWS Signer can be integrated to sign images before they are pushed to Amazon ECR, ensuring compliance with minimal additional steps. AWS CloudTrail for tracking: CloudTrail can be used to track who generates the signatures, meeting the requirement for auditability.
Topics
Community Discussion
No community discussion yet for this question.