Your team uses AWS CodeStar to manage a Java project. The source code is put in AWS CodeCommit. The build stage is managed by AWS CodeBuild and then the deployment stage uses CloudFormation to deploy a stack including resources such as Lambda function. The team lead has added several team members into the CodeStar project including Jason (Owner), Tony (Viewer) and Eric (Contributor). Different roles should have different permissions in the project. How are the permissions managed in CodeStar?

Answer options:

A.For different team members, users need to create appropriate IAM policies first and then assign these policies to the IAM users.
B.Users need to create IAM service roles with suitable IAM policies. Then assign these service roles to different team members in CodeStar depending on their roles.
C.In CodeStar console, configure the team member roles by assigning different read and write permissions to stages such as build or deploy.
D.Different team member roles have relevant IAM policies allocated automatically by AWS. CodeStar users only need to make sure the correct roles are assigned to team members.

Correct Answer – D
AWS CodeStar is able to automatically create customer managed IAM policies on your behalf when a project is created. These policies are used to manage access levels for team members in CodeStar project. Details can be found in https://docs.aws.amazon.com/codestar/latest/userguide/adh-policy-examples.html#adh-policy-service-role.
Option A is incorrect: Because users do not need to manually create IAM policies for CodeStar project team member roles.
Option B is incorrect: Because it does not need to assign roles to team members. CodeStar handles with this automatically.
Option C is incorrect: Because users cannot assign permissions to CodeStar team member roles in the console.
Option D is CORRECT: Because when users add team members with roles, related IAM policies are added to the IAM users automatically:
For the IAM user of Eric, the policy of CodeStar_testcodestar_Contributor was allocated: