AWS Certified DevOps Engineer – Professional (DOP-C02) — Question 358

A software development team is implementing a CI/CD pipeline for its web application. The team is using AWS CodeBuild to compile Java-based source code and to run unit tests.

The team needs to store the artifacts that are created by the CodeBuild project.

Which solution will meet this requirement?

Answer options

• A. Create an Amazon S3 bucket. Configure the S3 bucket as an artifact output location in the project. Add the artifact locations to the project's buildspec file. Configure an S3 bucket policy that allows the CodeBuild project's resource access role to access the S3 bucket.
• B. Create an Amazon S3 bucket. Configure the S3 bucket as an artifact output location in the project's buildspec file. Add the artifact locations to the project's buildspec file. Configure an S3 bucket policy that allows the CodeBuild service role to access the S3 bucket.
• C. Configure an Amazon Elastic File System (Amazon EFS) file system as a file system location for the project. Configure the EFS file system as the artifact output location in the project's buildspec file. Configure a file system policy that allows CodeBuild to access the file system.
• D. Create an Amazon Elastic Block Store (Amazon EBS) volume. Configure the EBS volume as the artifact output location in the project's buildspec file. Configure an IAM role that allows CodeBuild to access the volume.

Correct answer: B

Explanation

AWS CodeBuild natively integrates with Amazon S3 to store build output artifacts, which are defined under the artifacts section of the buildspec file. To securely upload these files, the S3 bucket policy must be configured to grant write permissions to the specific CodeBuild service role. Using Amazon EBS or Amazon EFS as direct artifact output targets in the buildspec is not supported in this manner.