Securely Store Source Code on AWS Cloud | Best Service for High Confidentiality and Security

Best Service for Storing Source Code

Question

A group of developers for a startup company store their source code and binary files on a shared open-source repository platform which is publicly accessible over the internet.

They have embarked on a new project in which their client requires high confidentiality and security on all development assets.

Which AWS service can the developers use to store the source code?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer - A.

AWS CodeCommit is a managed source control service.

It can be used as a data store to store source code, binaries, scripts, HTML pages and images which are accessible over the internet.

CodeCommit encrypts files in transit and at rest, which fulfills the additional client requirement (high confidentiality & security) mentioned in the question.

Also, CodeCommit works well with Git tools and other existing CI/CD tools.

https://aws.amazon.com/codecommit/

Option B is INCORRECT because AWS CodeDeploy is a deployment service that automates application deployments to Amazon EC2 instances, on-premises instances, serverless Lambda functions, or Amazon ECS services.

https://docs.aws.amazon.com/codedeploy/latest/userguide/welcome.html

Option C is INCORRECT because AWS Lambda will allow the developers in the scenario to run code without provisioning or managing servers.

The company would pay only for the compute time consumed.

There would be no charge when your code is not running.

https://aws.amazon.com/lambda/

Option D is INCORRECT because AWS CodeStar provides a unified user interface, enabling you to manage your software development activities in one place easily.

With AWS CodeStar, you can set up your entire continuous delivery toolchain in minutes, allowing you to start releasing code faster.

AWS CodeStar makes it easy for your whole team to work together securely, allowing you to manage access and add owners, contributors, and viewers to your projects easily.

However, this question asks for the service to store the source code.

AWS CodeStar is improper because it is a software development management tool rather than a source control service.

https://aws.amazon.com/codestar/

Option A, AWS CodeCommit, is the correct choice for the developers to store their source code securely.

AWS CodeCommit is a fully-managed source control service that provides a secure and highly scalable platform for storing and managing the source code. It offers Git-based repositories that enable developers to collaborate and version-control their code, and it integrates with a range of third-party tools such as Jenkins, GitHub, and GitLab.

The use of AWS CodeCommit ensures that the developers' source code and binary files are stored securely in a private repository that is not accessible to the public or unauthorized personnel. Additionally, the service provides features like encryption at rest and in transit, access control through AWS Identity and Access Management (IAM), and integration with AWS CloudTrail for auditing and compliance purposes.

AWS CodeDeploy, option B, is a deployment service that automates code deployments to Amazon EC2 instances, on-premises servers, and Lambda functions, but it does not provide source code storage functionality.

AWS Lambda, option C, is a serverless computing service that enables developers to run code without the need for provisioning or managing servers. However, it does not provide source code storage functionality.

AWS CodeStar, option D, is a service that helps developers quickly develop, build, and deploy applications on AWS. It provides templates and pre-configured workflows for popular languages and frameworks, but it does not provide source code storage functionality.

Therefore, the correct choice for the developers to store their source code securely and confidentially is AWS CodeCommit.