End-to-End CodePipeline Delivery

In this flagship DOP-C02 lab you will assemble a production-shaped delivery pipeline on AWS using only managed services. Source code lives in a versioned S3 bucket, CodeBuild compiles and packages it, a manual approval gate gates production, and CodeDeploy performs a canary shift on a Lambda alias. EventBridge routes pipeline failure events to SNS so your team is paged the moment a release breaks.

You will:

• Create a versioned S3 source bucket, a separate artifact bucket, a customer-managed KMS key, and seed an initial source ZIP
• Create a CodeBuild project, a Lambda function with a `live` alias, a CodeDeploy application, and a Canary10Percent deployment group
• Wire a four-stage CodePipeline (Source, Build, Approve, Deploy) with a least-privilege CodePipeline service role
• Trigger a release, approve the manual gate, and verify CodeDeploy shifts traffic to the new alias version
• Add an EventBridge rule that publishes pipeline FAILED events to SNS, and force a failure to confirm the alert fires

Region: `us-east-1`. Instance type: `t3.small` workstation. All resources are tagged `lab=true,Course=dop-c02` so the cleanup script can sweep them on lab stop.