Skip to content

Instantly share code, notes, and snippets.

@miguelmota
Last active February 22, 2018 23:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save miguelmota/8b68c82482f4383e78c5f588265732d3 to your computer and use it in GitHub Desktop.
Save miguelmota/8b68c82482f4383e78c5f588265732d3 to your computer and use it in GitHub Desktop.
AWS CodePipeline/CodeBuild/ECR notes
- Need to add pull/push action permissions in ECR repo and use principal `codebuild.amazonaws.com` "SidCodeBuildAccess".
- Need to add policy with `ecr:GetAuthorizationToken` to code build role (AmazonECSTaskExecutionRolePolicy)
- Move "AWS-CodePipeline-Service" and "AWSServiceRoleForECS" entities to selected IAM entities.
- Need to have a `buildspec.yml` in repo root and set env vars in code build project settings.
- Need to use env docker image managed by CodeBuild.
- Need to allow CodeBuild to modify default role.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment