Your team starts to build a CI/CD pipeline in AWS CodePipeline. Before the application is deployed in production, you have added an approval action in a stage to stop the CodePipeline pipeline. Your project manager needs to manually approve the action for the pipeline to proceed. However, the project manager informs you that he does not have enough permissions to approve it with his IAM user. How would you resolve this problem?

Answer options:

A.Add the project manager’s IAM user as an approver in the CodePipeline manual approval stage and rerun the pipeline.
B.In the AWS IAM console, attach the AWS managed IAM policy AWSCodePipelineFullAccess to the project manager’s IAM user.
C.Configure an SNS topic in the manual approval stage and subscribe the project manager’s work email to the SNS topic so that he can approve the action.
D.Attach the AWSCodePipelineApproverAccess managed policy to the project manager’s IAM user.

Correct Answer – D
Option A is incorrect because in the CodePipeline manual approval stage, you cannot configure an approver. The IAM user should be configured with proper permissions in order to approve the manual action.
Option B is incorrect because the AWSCodePipelineFullAccess policy allows all the actions related to CodePipeline. However, the IAM user only needs to have the permission to approve the manual stage.
Option C is incorrect because the project manager needs to use his IAM user to approve the manual action. SNS notification and subscription cannot resolve the permission issue.
Option D is CORRECT because with the AWSCodePipelineApproverAccess IAM policy, the IAM user is granted permissions to approve the manual action.
Reference:
https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-action-add.html
https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-iam-permissions.html
https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-approve-or-reject.html