You have been instructed to use the CodePipeline service for the CI/CD automation in your company. Due to security reasons, the resources that would be part of the deployment are placed in another account. Which of the following steps need to be carried out to accomplish this deployment? Choose 2 answers from the options given below.

Answer options:

A.Define an AWS key in KMS. Create and attach policies that will enable the cross-account access.
B.Create a reference Code Pipeline instance in the other account.
C.Add a cross account role.
D.Embed the access keys in the code pipeline process.

Answer – A and C
Option B is invalid since this would go against the security policy.
Option D is invalid since this is not a recommended security practice.
This is mentioned in the AWS Documentation.
You might want to create a pipeline that uses resources created or managed by another AWS account. For example, you might want to use one account for your pipeline and another for your AWS CodeDeploy resources. To do so, you must create an AWS Key Management Service (AWS KMS) key to use, add the key to the pipeline, and set up account policies and roles to enable cross-account access.
For more information on pipelines used to access resources in another account, please refer to the below URL-
https://docs.aws.amazon.com/codepipeline/latest/userguide/pipelines-create-cross-account.html