AWS Certified DevOps Engineer - Professional DOP-C02 — Topic 1 Question 418

Question

A DevOps engineer needs to implement a CI/CD pipeline in an AWS account. The pipeline must consume sensitive database credentials that are stored in an AWS Systems Manager Parameter Store parameter. The Parameter Store parameter is in a separate central account. The DevOps engineer needs to create and integrate the parameter with the CI/CD account. Which combination of steps will meet these requirements? (Choose three.)

Accepted Answer

Correct answer: A, E, F. To share a Systems Manager Parameter Store parameter across accounts you must use an advanced-tier parameter (A) — standard-tier parameters cannot be shared. Share it with the CI/CD account using an AWS Resource Access Manager (RAM) resource share (F). Because the parameter is a SecureString, encrypt it with a customer managed AWS KMS key and grant the CI/CD account decrypt permissions (E); the default aws/ssm key cannot be shared cross-account.

AWS Certified DevOps Engineer - Professional DOP-C02 — Question 418