A company requires that only trusted code can be deployed to AWS Lambda functions. A method of validating the integrity of the code should be implemented and developers should not be able to bypass the solution. Which combination of steps should a security engineer take to meet these requirements? (Select TWO.)