A company uses AWS Signer for all AWS Lambda functions. A developer recently left the company. The company must ensure that code authored by that developer can no longer be deployed to the Lambda functions. Which solution meets this requirement?
Choose an answer
Tap an option to check your answer.
Correct answer: Revoke all versions of the signing profile associated with the developer..
Why this is the answer
Revoking all versions of the signing profile associated with the developer is the correct solution. AWS Signer uses signing profiles to sign code. By revoking the signing profile, any code previously signed by that developer, or any new code they might try to sign, will no longer be trusted by AWS Lambda, preventing its deployment. Reviewing IAM roles and removing permissions would prevent the developer from signing new code, but wouldn't invalidate already signed code. Re-encrypting source code with a new KMS key is irrelevant to code signing and deployment. Amazon CodeGuru is a code analysis tool for performance and security, not for controlling code deployment based on developer identity.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed