DOP-C02 SDLC Automation Practice Question
A development team is using AWS CodeCommit as a source control repository. They want to automate the creation of a new feature branch whenever a developer creates a new Jira issue with a specific label. Which AWS service should be used to listen for Jira webhooks and trigger the branch creation?
⚠ Common exam trap
Test-takers frequently confuse AWS services that can receive webhooks (API Gateway + Lambda) with services that only react to internal AWS events (EventBridge) or that require polling (scheduled rules), leading them to choose a polling-based or build-based solution that cannot directly create branches in CodeCommit.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Lambda with Amazon API Gateway to receive the webhook
AWS Lambda with Amazon API Gateway is the correct choice because API Gateway can expose a public HTTPS endpoint that Jira can send webhook POST requests to. The Lambda function then processes the incoming payload, checks for the specific label, and uses the AWS SDK to create a new branch in CodeCommit. This provides a real-time, event-driven integration without polling or scheduled checks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Amazon EventBridge to schedule a rule every minute
Why it's wrong here
EventBridge scheduled rules are purely time-based (e.g., cron/rate expressions) and cannot be invoked by an incoming Jira webhook. To react to a webhook you need an HTTP endpoint that Jira can POST to; EventBridge does not expose an endpoint nor does it natively integrate with Jira's outgoing webhook payloads. Using a 1-minute schedule would also introduce latency and fail to consume the webhook in real time, so it cannot automatically create a branch when the Jira issue is created.
- ✓
AWS Lambda with Amazon API Gateway to receive the webhook
Why this is correct
This is the correct pattern: API Gateway exposes a public HTTPS endpoint that the Jira webhook POSTs to, and API Gateway invokes a Lambda function to process the payload. The Lambda function can then validate the webhook signature, extract branch metadata, and use the AWS CodeCommit SDK (e.g., CreateBranch with the target commit ID) to perform the branch creation in real time. This serverless design gives you a low-latency, exactly-once-ish webhook receiver without needing to run persistent infrastructure.
- ✗
AWS CodePipeline to poll for new Jira issues
Why it's wrong here
CodePipeline is an orchestration service for building, testing, and deploying; it has no built-in action type or polling mechanism for external issue trackers like Jira. While CodePipeline can be triggered by webhooks or EventBridge for supported AWS sources, it does not poll arbitrary external systems, and you cannot define Jira as a custom source without building a heavy custom action provider. Moreover, CodePipeline is not designed to execute API calls like "create a branch" directly—it invokes actions in phases, making it the wrong tool for this event-driven operation.
- ✗
AWS CodeBuild to run a build when a webhook is received
Why it's wrong here
CodeBuild is a fully managed build service that runs build commands, but it does not provide a public HTTP listener to receive arbitrary webhooks. CodeBuild can be triggered by webhook events from sources like CodeCommit or GitHub through its native integrations, but that only applies when the webhook originates from that source repository, not from Jira. Additionally, CodeBuild is meant for compiling and testing code; to create a branch you would still need a separate Lambda/SDK call, so using CodeBuild alone as the webhook receiver is architecturally incorrect.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
Courseiva writes every DOP-C02 question from scratch — 1,298 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DOP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DOP-C02 exam.