CI evaluates a SAM template for a utilities admin API and finds a security group that opens an admin port to 0.0.0.0/0. What should the pipeline do?
Select an answer to reveal the explanation.
Short Explanation
Wide-open admin ports are unlocked city-hall windows facing the street. CI should fail that SAM template, not shrug. Making it more open or waiting for an incident is the wrong kind of brave.
Full Explanation
Automated infrastructure policy checks during deployment testing catch unsafe IaC patterns such as admin ports exposed to 0.0.0.0/0. Failing CI prevents those templates from advancing. Warning-only, widening exposure, or deferring all infrastructure review until after incidents removes the guardrail Domain 3 expects in pipelines.