You are using the AWS CodeDeploy service to deploy an application onto AWS. The application uses secure parameters which are stored in the AWS Systems Manager Parameter Store. Which of the following must be done so that the deployment can be automated via CodeDeploy? Choose 2 answers from the options given below.

Answer options:

A.Use the aws ssm get-parameters with the --with-decryption option.
B.Use the AWS SSM get-parameters with the --with-no-decryption option.
C.Give permissions to the AWS Code Deploy service via AWS Access Keys.
D.Give permissions to the AWS Code Deploy service via an IAM Role.

Answer - A and D
You need to specify the --with-decryption option. This allows the CodeDeploy service to decrypt the password so that it can be used in the application. Also, use IAM Roles to ensure the CodeDeploy service can access the KMS service.
Option B is incorrect since you need to specify the --with-decryption option.
Option C is incorrect since this is not a secure way to access AWS services.
For more information on an example on this, please refer to the below URL-
https://aws.amazon.com/blogs/mt/use-parameter-store-to-securely-access-secrets-and-config-data-in-aws-codedeploy/