Question

A financial services company runs a CodePipeline that deploys a customer-facing web application. Compliance requires that a designated release manager explicitly authorize any deployment to the production stage, and the release manager must be notified with a link to review the change before approving. The DevOps team wants to implement this with the least custom code. How should they configure the pipeline?

Accepted Answer

Add a manual approval action to the production stage, configure it with an SNS topic the release manager subscribes to, and include a review URL in the approval action configuration.

Answer

Create a Lambda invoke action before the production stage that pauses the pipeline and emails the release manager, then resumes when the manager updates a DynamoDB flag.

Answer

Enable a CodeBuild action that runs a script prompting for approval via an interactive terminal session before continuing to production.

Answer

Configure an EventBridge rule on the pipeline state change that stops the pipeline and requires the manager to manually restart the execution from the console.