A company is designing a CI/CD pipeline for a microservices application deployed on Amazon EKS. The pipeline must support automated testing, container image scanning for vulnerabilities before deployment, and a deployment strategy that shifts traffic gradually to the new version while monitoring error rates. If errors exceed 1%, the deployment must automatically roll back. Which combination of services and features should be used? (Select THREE)

Select the native AWS developer tools that handle orchestration, container scanning, and advanced deployment strategies.

What mistakes do candidates make on this AWS SAP-C02 question?

Selecting Elastic Beanstalk when the target is explicitly stated as EKS.

A.

Use AWS CodePipeline to orchestrate the workflow, integrating with AWS CodeBuild for testing and building images.

B.

Use Amazon ECR image scanning to detect vulnerabilities upon image push.

C.

Use AWS CodeDeploy with a canary deployment configuration and CloudWatch alarms for automated rollback.

D.

Use AWS Elastic Beanstalk immutable updates to deploy the new containers and monitor health.

E.

Use AWS CloudTrail to monitor the application error rates and trigger an AWS Lambda function to roll back.

F.

Use AWS Systems Manager Patch Manager to scan the container images for vulnerabilities.