Question

A company deploys a containerized API to Amazon ECS using AWS CodeDeploy blue/green deployments orchestrated by CodePipeline. The team wants automated integration tests to run against the newly deployed (green) task set BEFORE any production traffic is shifted to it. If the tests fail, the deployment must roll back automatically without ever exposing the green task set to real users. Which approach satisfies these requirements?

Accepted Answer

Add a Lambda function in the AppSpec file's AfterAllowTestTraffic lifecycle hook that runs integration tests against the test listener, and rely on CodeDeploy to roll back if the hook reports failure.

Answer

Add a separate CodeBuild test action in CodePipeline after the CodeDeploy deploy action, and configure a pipeline rollback if the test action fails.

Answer

Configure a Lambda function in the AppSpec BeforeInstall hook to run integration tests before the green task set is created, failing the deployment if tests do not pass.

Answer

Enable the ECS deployment circuit breaker with rollback so failed integration tests trigger automatic rollback during the traffic shift.