DOP-C02 · Question #386
A company's DevOps team uses Node Package Manager (NPM) open source libraries to build applications. The DevOps team runs its application build process in an AWS CodeBuild project that downloads the…
The correct answer is A. Create an AWS CodeArtifact repository with an upstream repository named npm-store. Configure. AWS CodeArtifact is the best solution for hosting private NPM repositories while maintaining the ability to review and validate new package versions before they are used in the build process. It allows the company to: - Store NPM libraries in a private repository. - Use…
Question
A company's DevOps team uses Node Package Manager (NPM) open source libraries to build applications. The DevOps team runs its application build process in an AWS CodeBuild project that downloads the NPM libraries from public NPM repositories. The company wants to host the NPM libraries in private NPM repositories. The company also needs to be able to run checks on new versions of the libraries before the DevOps team uses the libraries. Which solution will meet these requirements with the LEAST operational effort?
Options
- ACreate an AWS CodeArtifact repository with an upstream repository named npm-store. Configure
- BEnable Amazon S3 caching in the CodeBuild project configuration. Add a step in the
- CCreate an AWS CodeCommit repository for each library. Clone the required NPM libraries to the
- DCreate an AWS CodeCommit repository for each library. Clone the required NPM libraries to the
How the community answered
(39 responses)- A49% (19)
- B8% (3)
- C28% (11)
- D15% (6)
Explanation
AWS CodeArtifact is the best solution for hosting private NPM repositories while maintaining the ability to review and validate new package versions before they are used in the build process. It allows the company to: - Store NPM libraries in a private repository. - Use upstream repositories to pull packages from public NPM repositories while caching them for - Control and review new package versions before they are made available to the build process. - Integrate with AWS CodePipeline to automate checks and validation of new versions. By configuring CodePipeline to check new package versions before they are approved for use and setting the package status to unlisted on failure, the company ensures that only validated libraries are used in builds.
Topics
Community Discussion
No community discussion yet for this question.