AWS DevOps Engineer Professional Practice Test

How are build artifacts managed in CodeBuild regarding encryption?

1. Artifacts must be encrypted manually

2. CodeBuild does not support artifact encryption

3. Artifacts are encrypted by default

4. External tools are needed for encryption

The correct answer is: Artifacts are encrypted by default

In AWS CodeBuild, artifacts created during the build process are encrypted by default. This ensures that sensitive data and information contained within those artifacts are protected through encryption at rest. By utilizing AWS Key Management Service (KMS), CodeBuild automatically applies encryption to the build artifacts, simplifying the process for developers and eliminating the need for manual encryption steps or external tools. This feature enhances security compliance and data privacy, particularly in environments where sensitive information is involved, making it easier for teams to manage and handle artifacts without additional overhead. Such straightforward handling of encryption reflects AWS's commitment to security best practices. Considering the other options, it is important to note that manual encryption is not required, as the service manages this automatically. Similarly, the assertion that CodeBuild does not support artifact encryption is inaccurate since artifact encryption is indeed a built-in feature. Lastly, there is no necessity for external tools for encryption in this context, as AWS provides comprehensive solutions within its ecosystem to handle these requirements seamlessly.