ExpertAWS SAP-C02 · Question 08 · Domain 2.1: Deployment Strategy
A company is designing a CI/CD pipeline for a microservices application deployed on Amazon EKS. The pipeline must support automated canary deployments, rollback capabilities, and integration with AWS Key Management Service (KMS) for secret management. Which combination of AWS services and tools should the architect use? (Select TWO)
A company is designing a CI/CD pipeline for a microservices application deployed on Amazon EKS. The pipeline must support automated canary deployments, rollback capabilities, and integration with AWS Key Management Service (KMS) for secret management. Which combination of AWS services and tools should the architect use? (Select TWO)
Answer options:
Use AWS CodeDeploy to manage canary deployments directly to EKS pods.
Use AWS CodePipeline with AWS CodeBuild for CI, and integrate with an open-source tool like ArgoCD or Flux for GitOps-based EKS deployments.
Store secrets in AWS Systems Manager Parameter Store and mount them using EFS.
Store secrets in AWS Secrets Manager encrypted with KMS, and use the Secrets Store CSI Driver to mount them in EKS pods.
Use AWS Elastic Beanstalk to manage the EKS cluster deployments.
Use AWS CloudFormation to perform canary deployments of Kubernetes manifests.
How to approach this question
Full Answer
Common mistakes
Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 7
75 questions · hints · full answers · grading