CodeBuild

Definition

AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages ready for deployment. It eliminates the need to provision, manage, and scale your own build servers, providing pre-configured build environments or allowing custom environments to be defined. CodeBuild integrates seamlessly with other AWS services, such as AWS CodePipeline, to automate the build and release process.

Secure Settings Example

version: 0.2

phases:
  install:
    runtime-versions:
      nodejs: 14
  build:
    commands:
      - npm install
      - npm test

artifacts:
  files:
    - '**/*'
  discard-paths: yes

environment:
  computeType: BUILD_GENERAL1_SMALL
  image: aws/codebuild/standard:5.0
  type: LINUX_CONTAINER

encryptionKey: arn:aws:kms:us-east-1:123456789012:key/abcd1234-abcd-1234-abcd-1234abcd1234

Insecure Settings Example

version: 0.2

phases:
  install:
    runtime-versions:
      nodejs: 14
  build:
    commands:
      - npm install
      - npm test

artifacts:
  files:
    - '**/*'

environment:
  computeType: BUILD_GENERAL1_LARGE
  image: aws/codebuild/standard:5.0
  type: LINUX_CONTAINER

# Missing encryption key for artifacts