This document discusses configuring AWS CodeBuild projects to access resources within a VPC. It provides an example CodeBuild project configuration that specifies the VPC ID, subnet IDs, and security group IDs to enable VPC access. It also includes examples of buildspec.yml files used by CodeBuild projects, one for a Java project and one for packaging a CloudFormation template.

1. CodeBuild

3. + BitBucket
+ CodePipeline

5. https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-available.html

6. version: 0.2
env:
variables:
key: "value"
parameter-store:
key: "value"
phases:
install:
commands:
- command
finally:
- command
pre_build:
commands:
- command
finally:
- command
build:
commands:
- command
finally:
- command
post_build:
commands:
- command
finally:
- command
artifacts:
files:
- location
discard-paths: yes
base-directory: location
cache:
paths:
- path
Это продолжение :)
https://docs.aws.amazon.com/codebuild/latest/userguide/build-spec-ref.html

7. Typically, resources in an VPC are not accessible by AWS CodeBuild. To
enable access, you must provide additional VPC-specific configuration
information as part of your AWS CodeBuild project configuration. This
includes the VPC ID, the VPC subnet IDs, and the VPC security group IDs.
VPC-enabled builds are then able to access resources inside your VPC.

8. Project:
Type: AWS::CodeBuild::Project
Properties:
Name: !Sub ${Environment}-${Brand}-${Application}
Artifacts:
Type: CODEPIPELINE
BadgeEnabled: False
EncryptionKey: !Ref ArtifactStoreEncryptionKeyArn
Environment:
ComputeType: BUILD_GENERAL1_SMALL
Image: !Ref Image
PrivilegedMode: !Ref PrivilegedMode
Type: LINUX_CONTAINER
ServiceRole: !Ref ProjectRole
Source:
Type: CODEPIPELINE
BuildSpec: !Sub build/${Environment}-${Brand}-${Application}-buildspec.yml
TimeoutInMinutes: 10
VpcConfig:
SecurityGroupIds:
- !Ref ProjectSecurityGroup
Subnets: !Ref PrivateSubnets
VpcId: !Ref VPC

9. Our project

10. general-cloudformation-templates
brand-shared-resources
Artifact-store
(brand-shared-resources-dev-artifact-s
tore)
brand-shared-resources-docker
brand-shared-resources-java8
brand-shared-resources-cloudformat
ion-package
application

11. version: 0.2
phases:
build:
commands:
- aws s3 cp
s3://brand-app-deployment/dependencies/brand-key-store-2017-01-19.jks
code/web/src/main/resources/brand-key-store.jks
- mvn --batch-mode clean verify -Pintegration-test
post_build:
commands:
- cp ./code/web/target/app.jar .
artifacts:
files:
- ./app.jar
- ./infrastructure/**/*
- ./build/**/*
prod-brand-shared-resources-java8-buildspec.yml

12. version: 0.2
phases:
pre_build:
commands:
- aws cloudformation validate-template --template-body
file://infrastructure/stack/main.yml
- export Bucket=$(echo ${CODEBUILD_SOURCE_VERSION} | cut -d'/' -f1 | cut -d':' -f6)
- export Prefix=$(echo ${CODEBUILD_SOURCE_VERSION} | cut -d'/' -f2)
build:
commands:
- aws cloudformation package --kms-key-id ${CODEBUILD_KMS_KEY_ID} --template
infrastructure/stack/main.yml --s3-bucket "${Bucket}" --s3-prefix "${Prefix}/package"
--output-template-file package.yml
post_build:
commands:
- cp ./infrastructure/*.json .
artifacts:
files:
- ./package.yml
- ./*.json
prod-brand-shared-resources-cloudformation-package-buildspec.yml

13. DEMO