Answer-first summary for fast verification
Answer: The IAM permissions are wrong for the CodeBuild service
Overall explanation Correct option: The IAM permissions are wrong for the CodeBuild service You can push your Docker or Open Container Initiative (OCI) images to an Amazon ECR repository with the docker push command. Amazon ECR users require permission to call ecr:GetAuthorizationToken before they can authenticate to a registry and push or pull any images from any Amazon ECR repository. Amazon ECR provides several managed policies to control user access at varying levels Incorrect options: The ECR repository is stale, you must delete and re-create it - You can delete a repository when you are done using it, stale is not a concept within ECR. This option has been added as a distractor. CodeBuild cannot talk to ECR because of security group issues - A security group acts as a virtual firewall at the instance level and it is not related to pushing Docker images, so this option does not fit the given use-case. The ECS instances are misconfigured and must contain additional data in /etc/ecs/ecs.config - The error Authorization is an indication that there is an access issue, therefore you should not look at your configuration first but rather permissions.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Your e-commerce company is shifting its software development approach from the traditional waterfall methodology to a more efficient continuous integration and continuous deployment (CI/CD) pipeline. Every application is now required to adhere to best CI/CD practices, be packaged as Docker containers, and subsequently deployed. These Docker images are to be stored in the Amazon Elastic Container Registry (ECR) and pushed using AWS CodePipeline and AWS CodeBuild.
During the implementation, the final step fails due to an authorization issue. What is the most probable cause of this failure?
A
The ECS instances are misconfigured and must contain additional data in /etc/ecs/ecs.config
B
The ECR repository is stale, you must delete and re-create it
C
CodeBuild cannot talk to ECR because of security group issues
D
The IAM permissions are wrong for the CodeBuild service
No comments yet.