A DevOps engineer has set up an automated web service deployment process using AWS CodePipeline. The pipeline includes the following stages: 1. Compilation of the deployment artifact and unit testing through an AWS CodeBuild project. 2. Deployment to staging Amazon EC2 instances using a CodeDeploy deployment group. 3. Deployment to production EC2 instances using another CodeDeploy deployment group. The QA team has requested the ability to inspect the build artifact before it is deployed to the production environment. They intend to use an internal penetration testing tool for manual tests, which is triggered by a REST API call. What should the DevOps engineer do to accommodate this request?