CodeBuild is being used during the deployment of an application.The application connects to an external database with database credentials being managed by Secrets Manager. Where should the reference to the database credentials be specified?

Answer options:

A.BuildSpec file
B.CodeBuild Environment Variable
C.AppSpec file
D.CloudFormation Template

Answer: A
Option A is CORRECT because CodeBuild uses the BuildSpec file as a specification of build commands and settings. “secrets-manager” syntax can be used to retrieve database credentials stored in AWS Secrets Manager.
Option B is incorrect because Build Environment variables should NOT be used for storing sensitive information as they are displayed in plain text.
Option C is incorrect because CodeDeploy uses the AppSpec file to specify and manage deployments.
Option D is incorrect because CloudFormation templates are used by CloudFormation and not by CodeBuild.
Reference:
https://docs.aws.amazon.com/codebuild/latest/userguide/build-spec-ref.html