DOP-C02 · Question #393
A company uses AWS Organizations to manage multiple AWS accounts. The accounts are in an OU that has a policy attached to allow all actions. The company is migrating several Git repositories to a…
The correct answer is A. Add a new SCP statement to the OU that denies the CodeConnections CreatingConnections D. Use CodeConnections to create a CodeConnections connection from each Region where the E. Use CodeConnections to create a CodeConnections repository link. Update each. By adding an SCP that denies codestar-connections:CreateConnection when the ProviderType is not your approved Git provider, you ensure no one can create connections to any other provider. CodeStar Connections are regional resources. To make your deployments highly available…
Question
A company uses AWS Organizations to manage multiple AWS accounts. The accounts are in an OU that has a policy attached to allow all actions. The company is migrating several Git repositories to a specified AWS CodeConnections supported Git provider. The Git repositories manage AWS CloudFormation stacks for application infrastructure that the company deploys across multiple AWS Regions. The company wants a DevOps team to integrate CodeConnections into the CloudFormation stacks. The DevOps team must ensure that company staff members can integrate only with the specified Git provider. The deployment process must be highly available across Regions. Which combination of steps will meet these requirements? (Choose three.)
Options
- AAdd a new SCP statement to the OU that denies the CodeConnections CreatingConnections
- BAdd a new SCP statement to the OU that allows the CodeConnections CreatingConnections
- CUse CodeConnectlons to configure a single CodeConnections connection to each Git repository.
- DUse CodeConnections to create a CodeConnections connection from each Region where the
- EUse CodeConnections to create a CodeConnections repository link. Update each
- FFor each Git repository, create a pipeline in AWS CodePipefine that has the Git repository set as
How the community answered
(36 responses)- A69% (25)
- B17% (6)
- C8% (3)
- F6% (2)
Explanation
By adding an SCP that denies codestar-connections:CreateConnection when the ProviderType is not your approved Git provider, you ensure no one can create connections to any other provider. CodeStar Connections are regional resources. To make your deployments highly available across Regions, you must create a connection in each Region where you deploy. Use CodeStar Connections’ repository link feature in your CloudFormation templates so that each stack pulls its template or modules directly from the Git repo via the established connection. This embeds the connection into the stack and automates the sync.
Topics
Community Discussion
No community discussion yet for this question.