<strong>A solutions architect of an IT company is considering to use CodeStar for a new project that needs high scalability and availability.More importantly, he prefers utilizing its powerful management features so that he could control the whole project status including team membership. The team that is working on this project contains 3 developers and 1 UI designer. </strong>

Answer options:

A.In CodeStar management console, on the “Team members” page, add the developers as Contributor, add the UI designer as Viewer and add the scrum master as Moderator.
B.For each IAM user, in the IAM console, attach relevant CodeStar policies. For example, add the below policy for the solutions architect who is the admin:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AdminPolicy",
"Effect": "Allow",
"Action": "codestar:*",
"Resource": "*"
}
]
}
C.For each IAM user, in the IAM console, attach relevant CodeStar policies. For example, add the below policy for the admin:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AdminRole",
"Effect": "Allow",
"Action": [
"codestar:DeleteProject",
"codestar:DisassociateTeamMember",
"codestar:AssociateTeamMember",
"codestar:UpdateTeamMember",
"codestar:CreateProject"
],
"Resource": "*"
}
]
}
D.In CodeStar management console, on the “Team members” page, add the developers as Contributor, add the UI designer and the scrum master as Viewer as both of them need read-only access

Correct Answer – D
One key feature of CodeStar is that you could Add Team Members to an AWS CodeStar Project.
If you have the owner role in an AWS CodeStar project or have the AWSCodeStarFullAccess policy applied to your IAM user, you can add other IAM users to the project team. This is a simple process that applies an AWS CodeStar role (owner, contributor, or viewer) to the user. These roles are per-project and can be customized.
Benefits of AWS CodeStar roles and team membership include:
You do not have to manually configure permissions in IAM for your team members.
You can easily change a team member`s level of access to a project.
Users can access project dashboards in the AWS CodeStar console only if they are team members.
User access to a project is defined by role.
And details please refer to
https://docs.aws.amazon.com/codestar/latest/userguide/how-to-add-team-member.html.
Option A is incorrect: Because there is no role of Moderator in CodeStar. For read-only access, the role of Viewer is needed.
Option B and C are incorrect: For CodeStar, the proper method to manage team membership is to use its “Team members” dashboard or CLI to allocate roles.