ExpertMedium1 markMultiple Choice
AWS SAP-C02 · Question 50 · Domain 2.1: Deployment Strategy
A development team uses AWS CloudFormation to manage their infrastructure. They want to implement a CI/CD pipeline that automatically tests CloudFormation templates for security misconfigurations (like open security groups or unencrypted buckets) BEFORE the infrastructure is deployed. Which AWS tool should be integrated into the pipeline?
A development team uses AWS CloudFormation to manage their infrastructure. They want to implement a CI/CD pipeline that automatically tests CloudFormation templates for security misconfigurations (like open security groups or unencrypted buckets) BEFORE the infrastructure is deployed. Which AWS tool should be integrated into the pipeline?
Answer options:
A.
AWS Config
B.
AWS CloudFormation Guard
C.
AWS Security Hub
D.
AWS Trusted Advisor
How to approach this question
Identify the tool designed for pre-deployment Infrastructure as Code (IaC) scanning.
Full Answer
B.AWS CloudFormation Guard✓ Correct
AWS CloudFormation Guard
AWS CloudFormation Guard is a policy-as-code evaluation tool that allows you to check your CloudFormation templates for compliance and security best practices before deployment, making it ideal for CI/CD integration.
Common mistakes
Choosing AWS Config, which is a post-deployment detective control.
Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 4
75 questions · hints · full answers · grading
More questions from this exam
Q01A global enterprise is redesigning its network architecture across 50 AWS accounts. They require ...HardQ02A financial services company uses AWS Organizations to manage 100+ accounts. The security team ma...MediumQ03An e-commerce company requires a multi-region active-active architecture for its critical order p...MediumQ04A company is setting up a new AWS environment using AWS Control Tower. They need to ensure that a...HardQ05An enterprise has 50 AWS accounts under AWS Organizations. They want to implement a chargeback mo...Medium