DevOps CI/CD Pipeline Design & Implementation Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 DevOps CI/CD Pipeline Design & Implementation flashcards as text
A microservices application uses separate CodePipeline pipelines per service. How can you ensure Service B's pipeline only runs after Service A's pipeline successfully completes?
Answer: Use an EventBridge rule that triggers Service B's pipeline on a SUCCEEDED pipeline execution event for Service A
EventBridge can listen for CodePipeline execution state change events and trigger a StartPipelineExecution API call to start a dependent pipeline on success.
Which AWS service provides a fully managed source control repository that integrates natively with CodePipeline and supports pull request-based workflows?
Answer: AWS CodeCommit
AWS CodeCommit is a fully managed Git repository service that integrates natively with other AWS developer tools including CodePipeline as a source action.
A build in CodeBuild must access a database password stored in AWS Secrets Manager. What is the recommended approach?
Answer: Reference the secret ARN in the buildspec.yml env/secrets-manager section so CodeBuild retrieves it at runtime
CodeBuild's buildspec supports a secrets-manager section that automatically fetches and injects Secrets Manager values as environment variables at build start without exposing them in logs.
During a CodeDeploy in-place deployment to EC2 instances, which lifecycle hook runs AFTER the application files are installed but BEFORE traffic is re-routed to the instance?
Answer: AfterInstall
AfterInstall runs immediately after the application files are copied, allowing you to configure permissions or run post-install scripts before the application starts.
A team wants to use feature flags to decouple code deployments from feature releases. Which AWS service is purpose-built for this use case?
Answer: Amazon CloudWatch Evidently for feature flags and experimentation
Amazon CloudWatch Evidently provides feature flags and A/B testing capabilities, allowing teams to deploy code and then gradually roll out features to user segments.
A CodeBuild project times out after 1 hour. The build completes in under 30 minutes in most cases but occasionally runs longer. What should be adjusted?
Answer: Increase the CodeBuild build timeout setting beyond 60 minutes up to the 8-hour maximum
CodeBuild supports a configurable timeout per project of up to 8 hours (480 minutes), so increasing the timeout accommodates occasional longer builds.
Which deployment strategy minimizes risk by running two identical production environments and switching traffic between them using Route 53 or a load balancer?
Answer: Blue/green deployment
Blue/green deployments maintain two environments simultaneously; once the new (green) environment is validated, traffic is shifted from old (blue) to new, enabling instant rollback by reverting the traffic shift.