A Company Is Using AWS CodePipeline to Deploy an Application

Multiple Choice

A company is using AWS CodePipeline to deploy an application. A recent policy change requires that a member of the company's security team sign off on any application changes before they are deployed into production. The approval should be recorded and retained. Which combination of actions will meet these new requirements? (Choose two.)

A) Configure CodePipeline with Amazon CloudWatch Logs to retain data.
B) Configure CodePipeline to deliver action logs to Amazon S3.
C) Create an AWS CloudTrail trail to deliver logs to Amazon S3.
D) Create a custom CodePipeline action to invoke an AWS Lambda function for approval. Create a policy that gives the security team access to manage custom CodePipeline actions.
E) Create a manual approval CodePipeline action before the deployment step. Create a policy that grants the security team access to approve manual approval stages.