A company is migrating from its on-premises data center to AWS. The company currently uses a custom on-premises CI/CD pipeline solution to build and…

Create an AWS Identity and Access Management Roles Anywhere trust anchor Create an IAM role that allows CodeArtifact actions and that has a trust relationship on the trust anchor. Update the on- premises CI/CD pipeline to assume the new IAM role and to publish the packages to CodeArtifact: Roles Anywhere allows on-premises servers to assume IAM roles, making it easier to integrate on- premises environments with AWS services. Steps: Create a trust anchor in IAM. Create an IAM role with permissions for CodeArtifact actions (e.g., publishing packages). Update the CI/CD pipeline to assume this role using the trust anchor. Create a new Amazon S3 bucket. Generate a presigned URL that allows the PutObject request. Update the on-premises CI/CD pipeline to use the presigned URL to publish the packages from the on-premises location to the S3 bucket. Create an AWS Lambda function that runs when packages are created in the bucket through a put command Configure the Lambda function to publish the packages to CodeArtifact: Using an S3 bucket as an intermediary, you can easily upload packages from on-premises systems. Steps: Create an S3 bucket. Generate presigned URLs to allow the CI/CD pipeline to upload packages. Configure an AWS Lambda function to trigger on S3 PUT events and publish the packages to CodeArtifact.
Reference: IAM Roles Anywhere Amazon S3 presigned URLs AWS Lambda function triggers