AWS DevOps Engineer Professional Practice Test

When adding on-premise instances to a CodeDeploy deployment group, how many IAM users should you create for 5 instances?

1. 1

2. 3

3. 5

4. 10

The correct answer is: 5

When integrating on-premise instances with CodeDeploy, you typically need to create an IAM user for each instance that requires deployment. This is because each on-premise instance must have its own set of credentials (IAM user) for CodeDeploy to authenticate and manage deployments individually. In this scenario, if you have five instances, it is necessary to create five IAM users. Each instance will use a distinct IAM user to ensure the deployment process is secure and manageable. This approach facilitates better access control and monitoring, as each instance's activities can be tracked independently. The other options would not align with the best practices for managing deployments in this context. For example, having just one IAM user for multiple instances would pose security risks, as it would not provide the granularity needed for access management. Similarly, creating three or ten IAM users would either be insufficient or excessive based on the number of instances, leading to unnecessary complexity or inadequate access control.