CodeBuild

• To build and test the application

• Source: Code commit, S3, BitBucket, Github

• Build Instruction:

  • buildspec.yml
    • must be at the root of your code
    • Components:
      • env define environments variables
        • variables: plain text variable
        • parameter-store: variables for to SSM parameter stores
        • secrets-manager: variables for AWS secrets manager
      • phases specify commands to run
        • install: install dependencies
        • pre_build: pre-build command
        • build: build command
        • post_build: post_build command
      • artifacts: what will be uploade to s3
      • cache: files to cache (usually dependencies) to speed up the build
  • or specify in Console

• Output logs can be stored in

  • S3
  • Cloudwatch Logs

• Use CloudWatch Events to detect failed build and CloudWatch Alarms to notify threshold for failure

• Build Project can be defined within

  • CodePipeline
  • CodeBuild

Supports a lot of languages. If your language is not supported. Use Docker

Can be run locally using Docker.

Notes

• Cannot access resources in VPC
• To access, you need to do a VPC configure, which specify
  • VPC ID
  • Subnet IDs
  • Security Group IDs
• These configuration must be store in
  • AWS Secrets Manager
  • AWS SSM Parameter Store