AWS Certified DevOps Engineer – Professional — Question 137

During the next CodePipeline run, the pipeline exits with a FAILED state during the build stage. The DevOps engineer verifies that the correct Systems Manager parameter path is in place for the environment variable values that were changed. The DevOps engineer also validates that the environment variable type is Parameter.

Why did the pipeline fail?

Answer options

• A. The CodePipeline IAM service role does not have the required IAM permissions to use Parameter Store.
• B. The CodePipeline IAM service role does not have the required IAM permissions to use the aws/ssm KMS key.
• C. The CodeBuild IAM service role does not have the required IAM permissions to use Parameter Store.
• D. The CodeBuild IAM service role does not have the required IAM permissions to use the aws/ssm KMS key.

Correct answer: C

Explanation

The pipeline failed because the CodeBuild IAM service role did not possess the required IAM permissions to access Parameter Store, which is essential for retrieving environment variable values. The other options pertain to IAM permissions related to CodePipeline or KMS, which are not relevant to the issue encountered in the build stage.