A company is using AWS CodePipeline to deploy an application. According to a new guideline, a member of the company's security team must sign off on…

To meet the new guideline for application deployment, the company can use a combination of AWS

CodePipeline and AWS CloudTrail. A manual approval action in CodePipeline allows the security

team to review and approve changes before they are deployed. This action can be configured to

pause the pipeline until approval is granted, ensuring that no changes move to production without

the necessary sign-off. Additionally, by creating an AWS CloudTrail trail, all actions taken within

CodePipeline, including approvals, are recorded and delivered to an Amazon S3 bucket. This provides

an audit trail that can be retained for compliance and review purposes.

Reference:

AWS CodePipeline’s manual approval action provides a way to ensure that a member of the security

team can review and approve changes before they are deployed1.

AWS CloudTrail integration with CodePipeline allows for the recording and retention of all pipeline

actions, including approvals, which can be stored in Amazon S3 for record-keeping2.