Amazon
DOP-C02 · Question #55
A Development team creates a build project in AWS CodeBuild. The build project invokes automated tests of modules that access AWS services. Which of the following will enable the tests to run the…
The correct answer is C. Create a service role in IAM to be assumed by CodeBuild with a policy attached to allow the. CodeBuild requires a service role to access AWS resources being tested/verified. https://aws.amazon.com/blogs/devops/access-resources-in-a-vpc-from-aws-codebuild-builds/
Submitted by khalil_dz· Mar 6, 2026Security & Compliance
Question
A Development team creates a build project in AWS CodeBuild. The build project invokes automated tests of modules that access AWS services. Which of the following will enable the tests to run the MOST securely?
Options
- AGenerate credentials for an IAM user with a policy attached to allow the actions on AWS services.
- BHave CodeBuild run only the integration tests as a build job on a Jenkins server. Create a role
- CCreate a service role in IAM to be assumed by CodeBuild with a policy attached to allow the
- DUse AWS managed credentials. Encrypt the credentials with AWS KMS. As part of the build
How the community answered
(47 responses)- A9% (4)
- B4% (2)
- C74% (35)
- D13% (6)
Explanation
CodeBuild requires a service role to access AWS resources being tested/verified. https://aws.amazon.com/blogs/devops/access-resources-in-a-vpc-from-aws-codebuild-builds/
Topics
#CodeBuild security#IAM roles#least privilege#service permissions
Community Discussion
No community discussion yet for this question.