Questions tagged with AWS CodeBuild

I have been searching high and low and have been unable to find any instructions on how to connect CodeCommit with Xcode, if anyone can help provide a source or something I would be most appreciative.

Command used in GitHub Actions to download APK from expo: latest_build=$(npx eas-cli build:list --status="finished" --distribution="store" --json | jq '[.[] | select(.releaseChannel=="development")][1].artifacts.buildUrl') Command used in GitHub Actions for create-upload and upload in device farm response_upload_app=$(aws devicefarm create-upload --project-arn $DEV_PROJECT_ARN --name latest_build.apk --type ANDROID_APP) curl -T latest_build.apk $url_upload_app Same command when run locally in terminal when the APK is available in a folder, works perfectly fine. Also, at times, when running in local terminal, it was giving request timeout error This is the error log in GitHub Actions in when running get-upload command for the corresponding create upload arn in device farm: "metadata": "{\"errorMessageUrl\":\"https://docs.aws.amazon.com/console/devicefarm/ANDROID_APP_AAPT_DEBUG_BADGING_FAILED\",\"errorMessage\":\"We could not extract information about your Android application package. Please verify that the application package is valid by running the command \\\"aapt debug badging <path to your test package>\\\", and try again after the command does not print any error.\",\"errorCode\":\"ANDROID_APP_AAPT_DEBUG_BADGING_FAILED\"} Debugging done so far: Ran this (aapt debug badging <path to apk>/latest_build.apk ) and was able to get package information correctly

Hi All, We have CICD CDK build pipeline running on linux2 image server having node version 12.x and CDK version 1.132.0 Since 09th or 10th of June it started giving error as "Unexpected Token ?" and exit code of 1. All constructs are same, no change. We tried to upgrade the CDK version also to latest version, but did not work. What can be done here to fix? Node versions are defaulted and we can change as it is managed by AWS. Regards

Hi All, I'm using AWS CodePipeline with CodeBuild & CodeCommit . I want to add custom stage and there I need to read configuration file & send that data to external service endpoint. Is there any option to achieve this using CodePipeline? Please guide me through this.

Hello, my code build not working. I always received this message, but I have a limit in my account. BATCH_START_BUILD_ERROR: Failed calling StartBuild for a batch.. Failed while calling StartBuild for buildType DOWNLOAD_SOURCE with exception message: Cannot have more than 0 builds in queue for the account (Service: AWSCodeBuild; Status Code: 400; Error Code: AccountLimitExceededException; Request ID: <>; Proxy: null). Can anyone help me? I see some answers, but I didn't understand how to solve the problem.

Recently, one of my CodePipelines has stopped working due to the source action failing with "[GitHub] InternalError". I can't seem to find any further details regarding this error, so I'm hoping for some insight. This is using the GitHub (Version 2) action provider. It seems to be specific to this one repo, as I've tested using other repos in our GitHub organization, and the Source action then succeeded.

I am running a docker image container in aws lambda (python3 env). From python handler function I am running as bash script which download node js project from s3 and then I run 'npm install' and 'npm run build'. But these two commands are not working and code not compiled. Please help me on this Thanks

Hello Everyone, I am trying to build a codebuild CI/CD project on AWS with CodePipeline and Terraform. In fact I am trying to replicate this repo [https://github.com/davoclock/aws-cicd-pipeline] following along with the instructions in this video [https://www.youtube.com/watch?v=JwTP3wZHYnU](video). When I try to run terraform apply after setting up my pipeline, I get the following error "Error creating CodeBuild project: InvalidInputException: CodeBuild is not authorized to perform: sts:AssumeRole on arn:aws:iam::xxxxxxxxxxxx:role/tf-codebuild-role" I will greatly appreciate any help with resolving this.

when using "stop an abandon" in codepipeline for non batch codebuild projects ... the codebuild run is stopped. however in batch mode the codebuild runs continue after using codepipeline's "stop and abandon" is this a known issue? is there a workaround?

Hi everyone, Help is very appreciated! I'm managing a code pipeline with CDK and when I deploy it to a custom VPC with an internet gateway (public subnet) I fail to see any logs in CodeBuild. Here is my CDK Code: ``` const pipeline = new CodePipeline(this, id, { pipelineName: `Hubs-CDK-Pipeline-${id}`, selfMutation: false, synth: new ShellStep('Synth', { input: CodePipelineSource.gitHub( 'stafflink-pty-ltd/sauron', id === Environment.STAGING ? 'aws' : 'main', { authentication: SecretValue.secretsManager('manavs-github-token', { jsonField: 'token' }) } ), primaryOutputDirectory: 'cdk/cdk.out', commands: [ `node -v`, `sudo npm i -g n --force`, `n lts`, `n prune`, `node -v`, `npm i -g yarn`, `yarn`, `yarn rw setup deploy serverless`, `rm -f .env`, `sudo wget -qO /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64`, `sudo chmod a+x /usr/local/bin/yq`, `yq eval-all -i '.provider.vpc.securityGroupIds |= ["${lambdaSG.securityGroupId}"]' api/replace.yml`, `yq eval-all -i '.provider.vpc.subnetIds |= ["${vpc.isolatedSubnets[0].subnetId}", "${vpc.isolatedSubnets[1].subnetId}","${vpc.isolatedSubnets[2].subnetId}"]' api/replace.yml`, `yq eval-all -i '.provider.iam.role.statements |= [{"Effect": "Allow", "Action": ["s3:GetObject", "s3:PutObject"], "Resource": ["${bucket.bucketArn}"]}]' api/replace.yml`, `yq eval-all -i '. as $item ireduce ({}; . * $item)' api/serverless.yml api/replace.yml`, `yq eval-all -i '. as $item ireduce ({}; . * $item)' web/serverless.yml web/replace.yml`, `cat api/serverless.yml`, `npm run ci:build`, `npm run ci:migrate`, `yarn rw deploy aws`, `cd cdk`, `npm i`, `npm i -g aws-cdk`, `cdk synth`, `cd ..` ] }), codeBuildDefaults: { vpc, subnetSelection: { subnetType: SubnetType.PUBLIC }, securityGroups: [codePipeSG], rolePolicy: [ new iam.PolicyStatement({ effect: Effect.ALLOW || undefined, actions: [ 'logs:CreateLogGroup', 'logs:CreateLogStream', 'logs:PutLogEvents' ], resources: ['*'] }), new iam.PolicyStatement({ effect: Effect.ALLOW || undefined, actions: [ 's3:Abort*', 's3:DeleteObject*', 's3:GetBucket*', 's3:GetObject*', 's3:List*', 's3:PutObject', 's3:PutObjectLegalHold', 's3:PutObjectRetention', 's3:PutObjectTagging', 's3:PutObjectVersionTagging' ], resources: ['*'] }) ], buildEnvironment: { computeType: ComputeType.LARGE, buildImage: LinuxBuildImage.STANDARD_5_0, ``` Here is my security group: ``` const codePipeSG = new SecurityGroup(this, 'code-pipeline-security-group', { vpc, allowAllOutbound: true, securityGroupName: `hubs-codepipe-${id}` }) ``` Here is my VPC: ``` const vpc = new Vpc(this, 'VPC', { cidr: id === Environment.PROD ? '10.1.0.0/16' : '10.0.0.0/16', natGateways: 0, maxAzs: 3, subnetConfiguration: [ { name: `public-${id}-1`, subnetType: SubnetType.PUBLIC, cidrMask: 24 }, { name: `isolated-${id}-1`, subnetType: SubnetType.PRIVATE_ISOLATED, cidrMask: 28 } ], vpcName: `hubs${id}` }) ```

Hi all, I'm new to cdk app programing, and trying to build a stack that import my existing codecommit repo to a codebuild project as the build source, build a docker image and push it to an ECR private repo. My Questions are: 1. ~~When I casted `cdk synth`, I encountered a `TypeError` saying `Cannot read properties of undefined (reading 'repositoryArn')` at the line of `new FFimgBuildStack()`. Does it mean that the `Repository.fromRepositoryArn()` get nothing by reading the ARN I offered, or I offered an invalid ARN? What is the proper way to import an existing codecommit repo?~~ 2. When we share a resource between stacks or import an existing resource to a stack, do we have to grant the permissions manually for those stacks that consumes the resources, or the cdk app will take care of it? The following is my source code: ```javascript import { App } from "aws-cdk-lib" import { BuildSpec, Project, Source, Cache, LocalCacheMode, LinuxBuildImage } from "aws-cdk-lib/aws-codebuild" import { Repository } from "aws-cdk-lib/aws-codecommit" export class FFimgBuildStack extends Stack { constructor(scope, id, props) { super(scope, id, props) // importing the existing git repo from codecommit const gitRepo = Repository.fromRepositoryArn( this, "project-git-repo-by-arn", "arn:aws:codecommit:my-region:1234567890:my-repo-name" ) // init codebuild project new Project(this, "codec-image-build-project", { source: Source.codeCommit({ gitRepo }), buildSpec: BuildSpec.fromSourceFilename("buildspec.yml"), cache: Cache.local(LocalCacheMode.DOCKER_LAYER), environment: { buildImage: LinuxBuildImage.STANDARD_5_0, privileged: true } }) } } const app = new App() const stackEnv = { account: process.env.CDK_DEFAULT_ACCOUNT, region: process.env.CDK_DEFAULT_REGION } new FFimgBuildStack(app, "ffmpeg-image-build-stack", { description: "The FFmpeg env image build.", env: stackEnv, }) ``` Thank you!

we are trying aws ci-cd pipeline for flutter-ios in aws codebuild but there is only three images available (i.e linux,ubuntu,windows) my questions is how to create ci-cd pipeline for flutter-ios in aws without Jenkins ? how to create custom image for ios

I am currently working with this PoC = Automatically build CI/CD pipelines and Amazon ECS clusters for microservices using AWS CDK [https://docs.aws.amazon.com/es_es/prescriptive-guidance/latest/patterns/automatically-build-ci-cd-pipelines-and-amazon-ecs-clusters-for-microservices-using-aws-cdk.html] And I have this error. This is the command I use to launch the deployment cdk deploy --context aws_account=xxxxxx --context aws_region=eu-west-2 --context vpc_nonprod_id=vpc-0b1ad2009aa6d2106 --context vpc_prod_id=vpc-00b4a914c2628a1b2 --context ecssg_nonprod_id=vpc-0b1ad2009aa6d2106 --context ecssg_prod_id=vpc-00b4a914c2628a1b2 --context code_commit_s3_bucket_for_code=cdk-hnb659fds-assets-xxxxxxxxxx-eu-west-2 --context code_commit_s3_object_key_for_code=arn:aws:kms:eu-west-2:xxxxxxxx:key/d92b32f6-d8cb-4429-adcc-d88d2d3f0ec3 --context microservice_name=devops-iris | CREATE_FAILED | AWS::CodeCommit::Repository | xxxxxx-codecommit-id Not Found (Service: Amazon S3; Status Code: 404; Error Code: 404 Not Found; Request ID: GRZCJ67AMTTS1318; S3 Extended Request ID: 3514cWqx2HUsD3cSLgj5zYCEw1IcAp6id5AVbBSDChEnKoFAo lNI0iP1jhMgR8v1Iifktm+dYEU=; Proxy: null) "code_commit_s3_object_key_for_code", I don't have idea, How can I know this value? Cheers Andy

Is there a step by step tutorial on how to deploy a Python Lambda via serverless using a Pipeline (or CodeBuild only for that matter) somewhere ? I've gone through someones tutorial here: https://www.youtube.com/watch?v=aGI4Wlm5c9U but always seem to get stuck at the multiple IAM policies involved.. Just wondering if AWS has a step by step that i can follow.

Hi, I would like to know easy way to start from the first line of log for the code-build execution (either in code-build console or cloudwatch-log console) My case, I had run the code-build, there are loads of logs (probably 100 of clicks on show previous logs, might take me to the first line of log, alternative clicking on view entire log, takes me to cloudwatch log, still no good way to go the first line of log for this loggroup (code-build execution) Thanks Ajay Kasam

Hi, My codebuild project should have access to my database. However, it fails to connect. I have tried following this tutorial: https://ctoasaservice.org/2019/01/23/aws-codebuild-and-access-to-rds/ However it still didn't work. In the security group of my RDS instance I added a TCP inbound rule with: 35.157.127.248/29 using port range 0-65535. which should be the IP address of Codebuild in eu-central-1. What am I doing wrong?

Hi, We want to implement a pessimistic locking of code commit and wanted to find out steps to implement this. Would appreciate if anyone can provide guidance on this. Thank you

Is anyone facing issues with AWS Codebuild getting stuck in the queue phase? AWS Codebuild is stuck in the queue and never kicks off build in US-EAST-1. I have the same exact codebuild replicated in the US-EAST-2 region and it runs fine there. To be clear: the actual build does not kick off. This is not a buildspec.yml issue. I'm building using Amazon Linux 2 ARM64. I presume that there's issues in US-EAST-1 with ARM64 builds. Any advice to get over this hurdle? I logged tickets with support but so far nothing.

I've created two sub-accounts trying to get this to work. I can't deploy anything! When trying to explicitly set concurrent limits I get: Project-level concurrent build limit cannot exceed the account-level concurrent build limit of 0.

My project is a large JS/Yarn monorepo (using workspaces) that is contributed to dozens of times a day, by multiple devs. Every time a PR is opened, we build, lint, and test the project, which requires running `yarn install` before anything else. Once a merge occurs to the main branch, any open PRs must merge with the new main branch, and the PR checker needs to be run again before _that_ branch is merged. As you can imagine, there can be a pretty large backlog of open PRs when we're in crunch time. I have successfully used (both s3 & local) caching before in smaller projects, however I can't seem to get **local** caching working with our monorepo (this is a large project, so s3 is much too slow for us, as far as I can tell). When we try using local caching, our build fails with `"EEXIST: file already exists, mkdir '/codebuild/output/src11111111/src/github.com/OUR_ORG/OUR_PROJECT/node_modules/@OUR_PACKAGE/common'".`. This behavior is documented across the web: - https://github.com/aws-samples/aws-codebuild-samples/issues/8 - https://stackoverflow.com/questions/55890275/aws-codebuild-does-not-work-with-yarn-workspaces Some of the remedies include using s3, but as mentioned this is a large project and we update packages at least once every two weeks (some weeks , multiple times), and our initial upload more than doubles our time to 40min. Downloading doesn't save us much time either. - Are there any reasonable steps we can take to cache our node_modules directories so we don't have to pull from yarn every time? - Are there any other solutions to speed up these build times (we're currently ~14min. After optimizing other parts of the build process)? - Do you have any example (large) mono repos you can point to as a template? - Any other tips to speed up our build times?

I have configured two build projects which are connected to Github repositories. One of these projects builds successfully with no issues. The latter however, hangs indefinitely at the DOWNLOAD_SOURCE phase (I have set the clone depth to 1 on a specific branch). Cannot really debug this, as there are no logs or anything. What else could I try?

Trying to upgrade LZ to V2.4.4 but getting stuck in the first step of the codebuild (container configuration). It seems that is using an OS image that is crashing due packages during the process. At the moment apt-get upgrade is trying to install a newer version of java JDK, which's requiring a manual interaction not mapped (potentially causing the error bellow): ``` Setting up java-1.8.0-amazon-corretto-jdk:amd64 (1:8.332.08-1) ... Configuration file '/usr/lib/jvm/java-1.8.0-amazon-corretto/jre/lib/security/policy/limited/local_policy.jar' ==> File on system created by you or by a script. ==> File also in package provided by package maintainer. What would you like to do about it ? Your options are: Y or I : install the package maintainer's version N or O : keep your currently-installed version D : show the differences between the versions Z : start a shell to examine the situation The default action is to keep your current version. *** local_policy.jar (Y/I/N/O/D/Z) [default=N] ? dpkg: error processing package java-1.8.0-amazon-corretto-jdk:amd64 (--configure): end of file on stdin at conffile prompt ``` That causes Google Chrome packages to fail, further down the line. ``` Errors were encountered while processing: java-1.8.0-amazon-corretto-jdk:amd64 W: Target Packages (main/binary-amd64/Packages) is configured multiple times in /etc/apt/sources.list.d/google-chrome.list:3 and /etc/apt/sources.list.d/google.list:1 W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list.d/google-chrome.list:3 and /etc/apt/sources.list.d/google.list:1 E: Sub-process /usr/bin/dpkg returned an error code (1) ``` First of all, not sure why AWS still using apt-get instead of APT to manage packages and further more using Chrome packages to containers executions. Anyway, have anyone faced and fixed this? Thanks.

Hi AWS team, I am trying to run "AWSCodeBuild" but am getting below error. I did some research and the result is "Concurrently running builds" I don't know what "Concurrently running builds" is? What do I need to do to solve the problem. This is error when run : Action execution failed Error calling startBuild: Cannot have more than 0 builds in queue for the account (Service: AWSCodeBuild; Status Code: 400; Error Code: AccountLimitExceededException; Request ID: 708ea06f-996c-4947-b907-93e714ac25bc; Proxy: null)

My CodeBuild projects are built using the image: aws/codebuild/amazonlinux2-x86_64-standard:3.0 I am building a .NET Core 3.1 Angular app. But when I try to build thru the pipelines, none of my projects complete because they are stuck in the QUEUED status. Several answers have said to just let the pipeline run and it will eventually complete but mine timed out after 8 hours. This is also not a billing issue: I have checked and we have paid our bills. Besides opening a ticket, which I might have to do, is there anything else I can do. This is a blocker for me. Thank you Justine

I have a basic understanding of AWS architecture, however I need a way to reduce current costs. My current pipeline is as follows: 1. Source react app code from Github 2. Use CodeBuild to build a docker container and push it to the ECR. 3. Deploy the container into ECS Fargate Cluster For security reasons, I do not want my ECS service to auto-assign a public IP. Instead I have been using VPC endpoints within the same subnets that the cluster operates in, for the following services: * com.amazonaws.eu-west-2.ecr.dkr (Interface) * com.amazonaws.eu-west-2.ecr.api (Interface) * com.amazonaws.eu-west-2.logs (Interface) * com.amazonaws.eu-west-2.secretsmanager (Interface) * com.amazonaws.eu-west-2.s3 (Gateway) The downside to this is now the majority of my AWS bill is taken up by having VPC endpoints stood up. The two options I thought of are: * Put a CloudFormation step in CodePipeline to stand up the VPC endpoints before ECS deployment, and delete manually after deployment * Create a Lambda function step in CodePipeline to stand up the VPC endpoints before deployment, and another Lambda step to delete them afterwards. Are either of these "best practice" or is there another way I could automatically create/delete these endpoints when required? Any further info required let me know.

i am having problem deploying build artifact to S3 , after code build built the artifact i can see the artifact stored in codepipeline's S3 but when tries to deploy to S3 it is having Action execution failed InternalError. Error reference code: a7866898-c8b7-4ebb-bd1a-83eab7bdc8f6. is there a log ? that i can debug further ?

I'm trying to create a lambda layer in serverless and have it deploy to AWS creating the lambda layer for use in other deployments. However I'm running into an issue where the "Lambda:PublishLayerVersion" is failing because of CompatibleArchitectures. I'm wondering if its possible that there was a mistake that I'm missing or its serverless having an issue because Action is using a lowercase 'p' for "Lambda:publishLayerVersion" when the docs here: https://docs.aws.amazon.com/lambda/latest/dg/API_PublishLayerVersion.html states it is "Lambda:PublishLayerVersion". It is also likely that the SDK error is legitimate that the param "CompatibleArchitectures" isn't supported in "us-west-1" but I have a hard time finding docs to tell me what is supported in different regions. serverless.yml Spec: ``` provider: name: aws runtime: python3.8 lambdaHashingVersion: 20201221 region: us-west-1 stage: ${opt:stage, 'stage'} deploymentBucket: name: name.serverless.${self:provider.region}.deploys deploymentPrefix: serverless iamRoleStatements: - Effect: Allow Action: - s3:PutObject - s3:GetObject Resource: "arn:aws:s3:::name.serverless.${self:provider.region}/*" - Effect: Allow Action: - cloudformation:DescribeStacks Resource: "*" - Effect: Allow Action: - lambda:PublishLayerVersion Resource: "*" layers: aws-abstraction-services-layer: # name: aws-abstraction-services-layer path: aws-abstraction-layer description: "This is the goal of uploading our abstractions to a layer to upload and use to save storage in deployment packages" compatibleRuntimes: - python3.8 allowedAccounts: - '*' plugins: - serverless-layers - serverless-python-requirements ``` Output of build log ``` [Container] 2022/04/12 17:14:41 Running command serverless deploy Running "serverless" from node_modules Deploying aws-services-layer to stage stage (us-west-1) [ LayersPlugin ]: => default ... ○ Downloading requirements.txt from bucket... ... ○ requirements.txt The specified key does not exist.. ... ○ Changes identified ! Re-installing... ... ○ pip install -r requirements.txt -t . ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts. aws-sam-cli 1.40.1 requires requests==2.25.1, but you have requests 2.27.1 which is incompatible. WARNING: Running pip as root will break packages and permissions. You should install packages reliably by using venv: https://pip.pypa.io/warnings/venv WARNING: You are using pip version 21.1.2; however, version 22.0.4 is available. You should consider upgrading via the '/root/.pyenv/versions/3.8.10/bin/python3.8 -m pip install --upgrade pip' command. Collecting requests Downloading requests-2.27.1-py2.py3-none-any.whl (63 kB) Collecting charset-normalizer~=2.0.0 Downloading charset_normalizer-2.0.12-py3-none-any.whl (39 kB) Collecting certifi>=2017.4.17 Downloading certifi-2021.10.8-py2.py3-none-any.whl (149 kB) Collecting idna<4,>=2.5 Downloading idna-3.3-py3-none-any.whl (61 kB) Collecting urllib3<1.27,>=1.21.1 Downloading urllib3-1.26.9-py2.py3-none-any.whl (138 kB) Installing collected packages: urllib3, idna, charset-normalizer, certifi, requests Successfully installed certifi-2021.10.8 charset-normalizer-2.0.12 idna-3.3 requests-2.27.1 urllib3-1.26.9 ... ○ Created layer package /codebuild/output/src847310000/src/.serverless/aws-services-layer-stage-python-default.zip (0.8 MB) ... ○ Uploading layer package... ... ○ OK... ServerlessLayers error: Action: Lambda:publishLayerVersion Params: {"Content":{"S3Bucket":"name.serverless.us-west-1.deploys","S3Key":"serverless/aws-services-layer/stage/layers/aws-services-layer-stage-python-default.zip"},"LayerName":"aws-services-layer-stage-python-default","Description":"created by serverless-layers plugin","CompatibleRuntimes":["python3.8"],"CompatibleArchitectures":["x86_64","arm64"]} AWS SDK error: CompatibleArchitectures are not supported in us-west-1. Please remove the CompatibleArchitectures value from your request and try again [Container] 2022/04/12 17:14:47 Command did not exit successfully serverless deploy exit status 1 [Container] 2022/04/12 17:14:47 Phase complete: BUILD State: FAILED [Container] 2022/04/12 17:14:47 Phase context status code: COMMAND_EXECUTION_ERROR Message: Error while executing command: serverless deploy. Reason: exit status 1 [Container] 2022/04/12 17:14:47 Entering phase POST_BUILD [Container] 2022/04/12 17:14:47 Phase complete: POST_BUILD State: SUCCEEDED [Container] 2022/04/12 17:14:47 Phase context status code: Message: ```

We need to use a custom Docker image for our CodeBuild processes, so I created one on my M1 MacBook Pro and uploaded it to AWS ECR. However, whenever I tried to use it in CodeBuild project I received the following error: ``` SINGLE_BUILD_CONTAINER_DEAD: Build container found dead before completing the build. Build container died because it was out of memory, or the Docker image is not supported ``` I looked for more information on the error but wasn't able to find anything on-line.

We have a CodeBuild project that is set up to build the develop branch from our GitGub repository when changes are pushed to it. In our case we used a 'Push' event trigger with this in the head ref ^refs/heads/develop$ That works but when you go to look at the builds to see which one you want to deploy, it just shows the merge commit hash for the develop branch under the 'Source Version' column rather than saying "develop". If I do a manual build and use 'develop' as the source it does say 'develop' in the source version. Is there a way to control this so that the Source Version shows something more meaningful? thanks

I'm trying to build an infrastructure using `CodePipeline` and `CodeBuild`. I've a .NET project with targetFramework set as `.Net Core 6`. When the CodeBuild process triggers the build, it throws an error ``` /root/.dotnet/sdk/5.0.202/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.TargetFrameworkInference.targets(141,5): error NETSDK1045: The current .NET SDK does not support targeting .NET 6.0. Either target .NET 5.0 or lower, or use a version of the .NET SDK that supports .NET 6.0. ``` If I switch the targetFramework to .Net Core 3.1 or 5, it works fine. Has anyone faced this issue before? If yes, how did they overcome it?

A deploy script running in a codebuild job part of a codepipeline pipeline is failing. The script has been running fine for several months until now. The command called is: **aws cloudfront create-invalidation --distribution-id $DISTRIBUTION_ID --paths '/*'** The exception we get is: **An error occurred (ServiceUnavailable) when calling the CreateInvalidation operation (reached max retries: 2): CloudFront encountered an internal error. Please try again.** Running the command locally works fine.

I cannot seem too get more than 1 concurrent build running at a time. If I try to set the "restrict Number of Concurrent Build" in the Project Configuration for CodeBuild to say 3 I get this error: "Project-level concurrent build limit cannot exceed the account-level concurrent build limit of 1" The build that we use builds a custom Windows Server Docker image. Not sure if that has any bearing on this. thanks

How can we increase the internet speed of the container running in AWS ECS and later how can we verify that container internet speed is increased or not while downloading any dependencies on container or posting some data into S3 while working with JAR execution from the container etc. ?

I am following this blog - https://aws.amazon.com/blogs/opensource/packaging-and-deploying-aws-lambda-functions-written-in-java-with-aws-cloud-development-kit/ to create the java lambda using CDK. But when I pushed the changes and it is failing in code build with the below error. The "cdk synth" worked in my local machine. Can some one give any insights on this issue ? ``` Bundling asset TestStack/test/LambdaStack/LambdaFunction/Code/Stage... [ERROR] Failed to execute goal org.codehaus.mojo:exec-maven-plugin:3.0.0:java (default-cli) on project test: An exception occured while executing the Java class. Failed to bundle asset TestStack/test/LambdaStack/LambdaFunction/Code/Stage, bundle output is located at /codebuild/output/src940121800/src/cdk.out/asset.593cf75a4cb232e162ae4760eddc8336106322f580119285c2b8f0df0c517874-error: Error: docker exited with status 125 ```

Hi, I am trying to setup CodeBuild to build the develop branch that the PR is merged into rather than building the actual PR branch. The reason for this is sometime peoples PR brances don't yet include the develop changes made since their PR was created. Can someone tell me what I need to do in the Source section of CodeBuild in order to achieve this? thanks

Hi everyone, Currently, I am in charge of setting CI/CD for mobile app projects which need to be run with our specific BlueTooth device. I think I can set up it in an on-premises solution which is we plug our phone and require the phone to connect to Bluetooth automatically for testing. I wonder can we do it in AWS (we will send our Bluetooth to AWS)? Hope for your answer! Thank you a lot for your help!

**I have this code as part of my cdk typescript** const stage = new CfnParameter(this, 'stageName'); const api = new apigateway.RestApi(this, 'typescriptapi', { description: 'example api gateway with typescript', deployOptions: { stageName: stage.valueAsString, }, .... ... **and running this command ** **cdk deploy TypescriptcdkStack --parameters stageName='UAT'** **it gives me error, what am I missing, I am using CDK 2.18.0 (build 75c90fa)** throw new Error(`ID components may not include unresolved tokens: ${unresolvedTokens.join(',')}`); Error: Resolution error: ID components may not include unresolved tokens: DeploymentStage.${Token[TOKEN.200]}.

I am on a "free tier" AWS account, and I'm attempting to use CodeBuild for an openWRT CI build. The source code is extracted from bitbucket just fine, and openWRT system requirements are also loaded according to the buildspec.yml, and the openWRT build seems to start and get underway correctly without errors. However the build always fails due to a timeout after 45min and 20 or so seconds. I have edited the build environment to set the timeout to 4 hours, as well as the associated service role's maximum session duration to 4 hours. I have saved these values, and they appear set when I review the settings. However after these values are set and confirmed, when the build is attempted it fails due to timeout at the 45 min mark! I then review the "build details" of the failed build and the environment setting in this window shows the timeout as 45m! Somehow the build timeout I set is being overridden, is there a way to correct this?

From time to time CodeBuild job which is configured to run on Github PR create/update events is not getting the latest commit, which actually triggered a build. This has happened approximately 5 times today, it is clearly visible since we were changing buildspec file in commits and we saw that builds were using buildspec from previous commit. We don't have developer support plan, but need this reported and fixed to continue using AWS services.

I am trying to use CodeBuild with submodule in CodeCommit repository, but when the build reach **DOWNLOAD_SOURCE** phase, I got following error: > Submodule error repository not found for primary source and source version refs/heads/master I used the relative path in submodule registration like `../another-repository`. In the documentation of CodeBuild, I can't find anything about usages of submodules, nor anything to the *git submodules* checkbutton in Source setup section. How to use submodules correctly in CodeBuild?

My customer is looking to deploy the app infra via a code pipeline which has the source, lint, compile, build, package and deploy stages. The lambda is in typescript and there are 4 lambdas which should be deployed for this app. Is there a need to have a different codepipeline for each lambda deployment or can I deploy all the lambdas in a single code pipeline. If there is a single pipeline, how will the app code linting, building, compiling and packaging happen for all the 4 lambdas ? Is it going to be in parallel? If yes, then would there 4 parallel runs of lint, compile and so on. Is there any reference architecture ?

Hello AWS Community, in my team we have just on AWS Account, and that way we deploy th **PreProd**and ro stages in tghe same account. the Problem is: i wanant to delete all stacks produced through the **PreProd **stage before moving to the **Pre **stage because of duplicat names ... etc. i tried using the command ``` cdk destroy --app 'npx ts-node ./bin/AutBusBackend.ts' --all --force" ``` but the destroy here is deleting the stacks without the prefix ***Pre***, and in this time we don't have anway this stacks. Do you know how can i get ride of this problem to delete the stacks that are preduced in the current stage before and not the default stacks names in cdk.out ? here is my pipeline code ``` const repo = codecommit.Repository.fromRepositoryName(this, 'AutbusBackendRepo', 'AutbusBackend'); const pipeline = new CodePipeline(this, 'AutBusPipeline', { pipelineName: 'AutBusPipeline', synth: new ShellStep('Synth', { input: CodePipelineSource.codeCommit(repo, 'master'), commands: [ 'npm install -g npm', 'npm install', 'npm ci', 'npm run build', 'npm run cdk -- synth' ] }) }); const preProd = pipeline.addStage(new AppStage(this, 'PreProd',{ env: { account: account, region: region } })); const step1 = new ShellStep('IntegrationTesting', { commands: [ 'npm install', 'npm test' ] }); const step2 = new ManualApprovalStep('Manual approval before Prod'); const step3 = new ShellStep('Delete deployed Stacks', { commands: [ 'npm install', 'npm install -g aws-cdk', "cdk destroy --app 'npx ts-node ./bin/AutBusBackend.ts' --all --force" ] }); // step2.addStepDependency(step1); // step3.addStepDependency(step2); // preProd.addPost(step3); // preProd.addPost(step2); // preProd.addPost(step1); const prodStage = pipeline.addStage(new AppStage(this, 'Prod', { env: { account: account, region: region } })); ``` Thanks in adavance for any new insiring idea

Hello, I am trying to use CodeBuild for the first time, and I receive the following error: `Cannot have more than 0 builds in queue for the account`. I have checked my quotas and I have 5,000 Build projects available, and all other quotas are high as well. Has anyone been able to resolve this issue in the past? Thanks.

My repo has git submodules with one submodule has another level submodule during the DOWNLOAD_SOURCE i receive a generic error like: ``` Submodule error authentication required for primary source and source version refs/heads/master Submodule error authentication required for primary source and source version refs/heads/master ``` this gives me no detail on which submodule caused the error. Is there more logging available ?

The free account permit using the build.general1.small, but, how can i select it?

Hi, I have a very simple C# Lambda that I will execute from a schedule. I want to use CodeBuild and CodeDeploy to be able to deploy new versions of this to either my staging or production environments. At the moment, my CodeBuild project build does the following: * Builds the Lambda c# project * Pushes the code to the Lambda $latest version * Creates a new Lambda version * Updates (string replacement) my Lambda deployment appspec.yml file to have the correct 'currentversion' and 'targetversion' based on what the current versions are. * uploads the appspec to an S3 bucket so that I can use it later in CodeDeploy. My CodeDeploy just takes the appspec.yml file and executes it which then changes the $latest version of the Lambda to the new version. Thats all good (I think) except that my CodeBuild doesn't know where I want to deploy the change to (staging or production) so should I be uploading 2 sets of code (one targeting a 'stage' Lambda alias and the other targeting a 'production' Lambda alias)? Or should there be a separate CodeBuild project for each environment? Or should I be having a completely separate Lambda (instead of using aliases) where one is for staging and the other for production? I feel like I am doing something horribly wrong here :)

I have a build project in AWS CodeBuild. This project uses a docker image stored in AWS ECR. I have to modify the options which are used to run the container - specifically, I want to add `--init`. I see there is a `initProcessEnabled` option which can be used for ECS, but I don't understand how to combine this with CodeBuild.

I can run the project on my local MAC, but when I use the pipeline to build it. I got this error: Command "python setup.py egg_info" failed with error code 1 in /tmp/pip-build-axjgd0da/MarkupSafe/ This project is working well, and I did not update any new lib in it. Even I redeployed to the old branch, it has the same error. Here are the build logs: `Collecting MarkupSafe==2.1.0 (from -r /usr/src/app/requirements.txt (line 1)) Downloading https://files.pythonhosted.org/packages/62/0f/52c009332fdadd484e898dc8f2acca0663c1031b3517070fd34ad9c1b64e/MarkupSafe-2.1.0.tar.gz Complete output from command python setup.py egg_info: Traceback (most recent call last): File "<string>", line 1, in <module> File "/tmp/pip-build-axjgd0da/MarkupSafe/setup.py", line 65, in <module> run_setup(True) File "/tmp/pip-build-axjgd0da/MarkupSafe/setup.py", line 44, in run_setup ext_modules=ext_modules if with_binary else [], File "/usr/lib/python3.7/site-packages/setuptools/__init__.py", line 129, in setup return distutils.core.setup(**attrs) File "/usr/lib64/python3.7/distutils/core.py", line 121, in setup dist.parse_config_files() File "/usr/lib/python3.7/site-packages/setuptools/dist.py", line 442, in parse_config_files ignore_option_errors=ignore_option_errors) File "/usr/lib/python3.7/site-packages/setuptools/config.py", line 106, in parse_configuration meta.parse() File "/usr/lib/python3.7/site-packages/setuptools/config.py", line 382, in parse section_parser_method(section_options) File "/usr/lib/python3.7/site-packages/setuptools/config.py", line 355, in parse_section self[name] = value File "/usr/lib/python3.7/site-packages/setuptools/config.py", line 173, in __setitem__ value = parser(value) File "/usr/lib/python3.7/site-packages/setuptools/config.py", line 430, in _parse_version version = self._parse_attr(value) File "/usr/lib/python3.7/site-packages/setuptools/config.py", line 305, in _parse_attr module = import_module(module_name) File "/usr/lib64/python3.7/importlib/__init__.py", line 127, in import_module return _bootstrap._gcd_import(name[level:], package, level) File "<frozen importlib._bootstrap>", line 1006, in _gcd_import File "<frozen importlib._bootstrap>", line 983, in _find_and_load File "<frozen importlib._bootstrap>", line 965, in _find_and_load_unlocked ModuleNotFoundError: No module named 'markupsafe' ---------------------------------------- Command "python setup.py egg_info" failed with error code 1 in /tmp/pip-build-axjgd0da/MarkupSafe/ The command '/bin/sh -c pip3 install -r $DOCKER_APP_HOME/requirements.txt' returned a non-zero code: 1 make: *** [docker-build] Error 1`

Hi, I'm confronted with a really annoying problem currently. My custom VPC (3 public subnets, 3 private subnets -> internet access through NAT instances) broke out of the blue yesterday. My infrastructure is deployed via CloudFormation and yesterday I updated a stack where three NAT instances for my VPC are located (for each public subnet there is one NAT instance deployed in it). They have worked flawlessly before yesterday and as a new Amazon Linux 2 version was released (I reference the AMI ID via /aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-arm64-gp2), these instances got updated to use the newest AMI. Since then I have problems routing traffic from private subnets to the internet as things are not working as expected anymore. The current primary point of failure is that my CodePipeline fails because a CodeBuild action fails. The temporary CodeBuild instance is deployed in one of the three private subnets and then has to download a CodePipeline artifact from S3 through the internet. This step fails with the following error: `CLIENT_ERROR: RequestError: send request failed caused by: Get "https://s3.eu-central-1.amazonaws.com/<S3-bucket-name>?location=": dial tcp 52.219.170.173:443: connect: no route to host for primary source and source version arn:aws:s3:::<S3-prefix>` The thing is: before yesterday's last stack update which altered the NAT instances, everything was working as expected and CodePipeline succeeded. CodeBuild was able to download the necessary artifacts from S3 and the VPC and NAT instances were set up correctly. Then the update came in and CodeBuild fails now. The only thing that was changed was the AMI ID for the NAT instances (and I replaced absolute strings for "ProjectName" in my CodeBuild actions in CodePipeline with !Ref to the AWS::CodeBuild::Project resources which should have nothing to do with my current problem). After the updated NAT instances were not working anymore, I set their AMI IDs to explicit older versions as I assumed that there is a problem with the newest Amazon Linux 2 version. However, even with the older AMIs I'm not able to get the NAT instances working again (at least not for CodeBuild, but I noticed that ECS services running on an EC2 instance (which is also deployed in a private subnet) lost connection to the internet as well). I even redeployed the whole infrastructure to check if there is a problem on the side of AWS but the problem persists. The problem got me really frustrated now as everything was working fine. Then a small update was applied and now the NAT instances fail even if I havn't changed anything in the VPC and NAT configuration. Where should the problem be now if not on the side of AWS? My currently deployed NAT instances are configured as described by AWS and as they have worked before, they are reachable via SSH and can access the internet via the VPCs internet gateway. Still, CodeBuild continues to fail with the mentioned error and the internet seems not to be accessible from private subnets as it was the case before yesterday. I would be more than glad if anyone has suggestions how this problem can be resolved now. Thanks in advance!

Hi All, In My BuildProject/BuildSpec (in my STG Account), I run this command : - cdk deploy --require-approval never it gives me this error : ``` myStack: deploying... [0%] start: Publishing e988sdsf934da0d45effe675sdscb946f3e1sds68:current [0%] check: Check s3://cdk-hnb65dds-assets-xxxxxxxx-cregion/assets/e9882ab1236873df4sdfeffe67sdfc8ce13bsdff3e1d6sdf8d68.zip Call failed: listObjectsV2({"Bucket":"cdk-hnsd59fds-assets-xxxxxxxx-region","Prefix":"assets/e98ssdfsd87dsffsdffdsfcc8sdsdfdd6141fsdd68.zip","MaxKeys":1}) => Access Denied (code=AccessDenied) [33%] fail: Access Denied [33%] start: Publishing c24b999656e4fe6c609c31dfadffbcdfdfc2c86df:current [33%] check: Check s3://cdk-hnb659fds-assets-xxxxxxxx-cregion/assets/c24b999656e4fe6c609c31dfadffbcdfdfc2c86df.zip Call failed: listObjectsV2({"Bucket":"cdk-hnb659fds-assets-xxxxxxxx-cregion","Prefix":"assets/c24b999656e4fe6c609c31dfadffbcdfdfc2c86df.zip","MaxKeys":1}) => Access Denied (code=AccessDenied) [66%] fail: Access Denied [66%] start: Publishing werer56e4fe6c609c3ewrd17a4d9c3afwr6b8c2wer:current [66%] check: Check s3://cdk-hnb659fds-assets-xxxxxxxx-cregion/assets/werer56e4fe6c609c3ewrd17a4d9c3afwr6b8c2wer.zip Call failed: listObjectsV2({"Bucket":"cdk-hnb659fds-assets-xxxxxxxx-cregion","Prefix":"assets/werer56e4fe6c609c3ewrd17a4d9c3afwr6b8c2wer.zip","MaxKeys":1}) => Access Denied (code=AccessDenied) [100%] fail: Access Denied ❌ myStack failed: Error: Failed to publish one or more assets. See the error messages above for more information. at publishAssets (/usr/local/lib/node_modules/aws-cdk/lib/util/asset-publishing.ts:27:11) ``` How can I give CDK stack running from BuildSpec permission to publish assets? I already added this policy to my codeBuild service role, but still same issue : ``` { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:GetObject*", "s3:PutObject", "s3:PutObjectAcl", "s3:getBucketLocation" ], "Resource": [ "arn:aws:s3:::cdk*" ] } ] } ``` also had this error : ``` ser: arn:aws:sts::xxxxxx:assumed-role/codebuild-mybp-service-role/AWSCodeBuild-d1acsd11-4sad7-9sada6834ffsadbs is not authorized to perform: lambda:InvokeFunction on resource: arn:aws:lambda:region:xxxxxxxx:function:myStack-CustomCDKBucketDeployment-l5dzxcszxA7assa because no identity-based policy allows the lambda:InvokeFunction action (Service: AWSLambda; Status Code: 403; Error Code: AccessDeniedException; Request ID: eedf2-03dfdf3-4ddsfd7-bfdg7-2dfsdff5c2dfgd0; Proxy: null) ``` not sure which lamda he wants to invoke here and why? what are the right permissions for this Thank you!!

Hi All, In My BuildProject/BuildSpec (in my STG Account), I run this command : `- cdk deploy --require-approval never` it gives me this error : `mystackName failed: Error: Need to perform AWS calls for account xxxxxxxx(DEV_ACCOUNT_ID), but the current credentials are for yyyyyy (STG_ACCOUNT_ID)` It worked fine for another branch but when I put the name of another branch it gives me that error, not sure what happens? Thank you.

Hi Team, In my Pipeline -> Execution History -> source I have a section: Output variables Key Value AuthorDate 2022-03-01T10:14:36Z BranchName main CommitId 9d1545410efdf085185cdfdfdbdfdce807e9a3dfd8dfd CommitMessage my commit message CommitterDate 2022-03-01T10:14:36Z RepositoryName myRepo_name is it possible to read those Output variables in my BuildProject->BuildSpec as env variables? so I can use their values, especially the BranchName value. Thank you!

I have a CodeBuild project that was created by AWS Control Tower Account Factory for Terraform. Every time I tried to "Start build" in the console, it spits out following error: Build failed to Start. The following error occurred: Cannot have more than 0 builds in queue for the account Log events from CloudWatch: [ERROR] 2022-02-27T01:01:56.498Z 5aaae098-f77f-457d-8ff8-ee202b27c308 {'FILE': 'codebuild_invoker.py', 'METHOD': 'lambda_handler', 'EXCEPTION': 'An error occurred (AccountLimitExceededException) when calling the StartBuild operation: Cannot have more than 0 builds in queue for the account'} Traceback (most recent call last): File "/var/task/codebuild_invoker.py", line 30, in lambda_handler job_id = client.start_build(projectName=codebuild_project_name)["build"]["id"] File "/var/runtime/botocore/client.py", line 386, in _api_call return self._make_api_call(operation_name, kwargs) File "/var/runtime/botocore/client.py", line 705, in _make_api_call raise error_class(parsed_response, operation_name) botocore.errorfactory.AccountLimitExceededException: An error occurred (AccountLimitExceededException) when calling the StartBuild operation: Cannot have more than 0 builds in queue for the account [ERROR] 2022-02-27T01:01:56.498Z 5aaae098-f77f-457d-8ff8-ee202b27c308 {'FILE': 'codebuild_invoker.py', 'METHOD': 'lambda_handler', 'EXCEPTION': 'An error occurred (AccountLimitExceededException) when calling the StartBuild operation: Cannot have more than 0 builds in queue for the account'} Traceback (most recent call last): File "/var/task/codebuild_invoker.py", line 30, in lambda_handler job_id = client.start_build(projectName=codebuild_project_name)["build"]["id"] File "/var/runtime/botocore/client.py", line 386, in _api_call return self._make_api_call(operation_name, kwargs) File "/var/runtime/botocore/client.py", line 705, in _make_api_call raise error_class(parsed_response, operation_name) botocore.errorfactory.AccountLimitExceededException: An error occurred (AccountLimitExceededException) when calling the StartBuild operation: Cannot have more than 0 builds in queue for the account Any pointer to solve the error?

Hi Team, I have an AWS Pipeline in my DEV account, I created a second Pipeline In my PROD account. I followed this articles : 1 - https://prashant-48386.medium.com/cross-account-codepipeline-that-use-codecommit-from-another-aws-account-9d5ab4c892f6 2- https://docs.aws.amazon.com/codepipeline/latest/userguide/pipelines-create-cross-account.html to make the PROD Pipeline use the Repository of the DEV account. how can I Build the source from a specific git tag, not from a branch name? when I put the tag number on the Pipeline source stage it fails. I tried to edit the source stage in the pipeline and select 'full clone' option but I had this error : `remote repository is empty for primary source and source version 63sdsde73f2e1f6sdsd7564f742csdsds91ssd1f7sdsa` as I used a remote repository in another account (DEV). I tried also to do this in my Buildspec : ``` ... git-credential-helper: yes .... build: commands: - echo Build started on `date` - git config --global user.name $REPO_NAME - git config --global user.email "$REPO_NAME@xxxx.xxx" - git clone code_conit_remote_repo_dev_account_url/$REPO_NAME --branch=$TAG_VERSION - cd $REPO_NAME ``` git clone https://codecommit.region.amazonaws.com/xx/xx/xx/$REPO_NAME --branch=$TAG_VERSION but I had this error : `fatal: unable to access 'https://codecommit.region.amazonaws.com/xx/xx/xx/myRepoName/': The requested URL returned error: 403` `Command did not exit successfully git clone https://codecommit.region.amazonaws.com/xx/xx/xx/$REPO_NAME --branch=$TAG_VERSION exit status 128` Thanks for your help.

I have come from an Azure background where builds would be automated and then when your ready you can browse through the build history, find the one that you want to deploy and hit the release button, after which you choose the environment where you wish to deploy to (Test or Prod). I have just begun my AWS journey and I can't find anything that simple for deploying an already built build. I have read the Console approach in this article https://docs.aws.amazon.com/codedeploy/latest/userguide/tutorials-windows-deploy-application.html but it seems a little convoluted. You need to go to CodeDeploy, then select your application, then choose the environment (Deployment Group), then somehow you need to know which artifact in the S3 bucket is the one that you want to deploy. The article suggests going to S3 which feels unnecessary. I'm sure I must be missing something here. I am aware of CodePipeline and I use that for automating the build part of the process but don't want the auto deploy.

Setting up a codebuild action inside codepipeline via a CF template (the AWS::CodePipeline::Pipeline resource), I keep running into a very limiting factor where the configuration fields are all limited to 1000 characters (see: https://docs.aws.amazon.com/codepipeline/latest/userguide/limits.html: ``` Maximum length of the action configuration value (for example, the value of the RepositoryName configuration in the CodeCommit action configuration should be less than 1000 characters: "RepositoryName": "my-repo-name-less-than-1000-characters") ``` This limit is enough for most configuration fields, but when configuring a `CodeBuild` action, the `EnvironmentVariables` field [expects a JSON string](https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-codepipeline-pipeline-stages-actions.html#cfn-codepipeline-pipeline-stages-actions-configuration). This JSON string can very fast reach 1000 characters, with even as little as 10 environmental variables, especially if those variables are extracted from `SECRETS_MANAGER`. For example, declaring just one variable like this: ``` {"name":"MYSERVICE_VARIABLE","value":"aws:secretsmanager:ap-northeast-1:123458087:secret:my-secret-staging-name:password","type":"SECRETS_MANAGER"} ``` Will on its own be 148 characters. If the pipeline requires just 5 of these secrets and maybe 2-3 more short ones, the limit will be reached and deployment of the pipeline will fail. I was wondering if there is any chance this limit can get reviewed once more and maybe increased to, say, 1mb json string? Failing to do so will render this feature useful only in the simplest of use-cases... Regards, Julian.

Faced the with next error: **Build failed to start. The following error occurred: Cannot have more than 0 builds in queue for the account** Credit card - valid Tried on two regions (because I read that there are problems with us-east-1) Could anybody help with this? Thanks a lot in advance!

Hi team, I have 3 AWS accounts: DEV, STG and PROD my code commit repositories are in the DEV account. I don't want to duplicate those repositories on the STG and PROD accounts. So that my repositories in the DEV account be the single point of truth. and I can be able to create a release from the STG or the PROD using the DEV repositories. Is there a best way/architecture to achieve this? without doing a workaround on the build spec (like using keys and doing git pull ... on the build spec of STG and PROD). I followed points 1 and 2 o this tutorial : https://docs.aws.amazon.com/codecommit/latest/userguide/cross-account.html after that, I can see DEV repositories in PROD account **with switch role** but I can't create a codeBuild/ code pipeline project ... because the role switched give only permission to DEV repos, but I want to create the codeBuild in PROD not DEV using the DEV repos (even I give to the role switched more permissions the codeBuild created from PROD was actually created in DEV not in PROD) Just want to create a new code deploy for fargate in PROD that relies on tags / repos generated from DEV account, so when creating the code deploy in PRD account I can select DEV repos/ tags as source. can we use the RAM service to share repos ? appreciate any help.

Hi, I think I have worked out how to enable rolling updates for more than one service in my cluster. I solved this by writing out more than one imagedefinitons.json file. However I have an issue in that every time my pipeline runs, even if the ECR image digest hasn't changed, both services taskDefs get bumped and replace the previous task. Is this the expected behaviour? Is there a way for ECS deploy to spot the digest is the same and not to roll forward. Thanks, Guy

I want to use a Windows image for my CodeBuild machine but I don't get the option in the CodeBuild > Environment > Environment Type for Windows. I did read this article from 2018 that mentions the regions that are available and Asia Pacific wasn't one back then, but that was 4 years ago. https://aws.amazon.com/about-aws/whats-new/2018/05/aws-codebuild-adds-support-for-windows-builds/ Are Windows images now available to use in ap-southeast-2? thanks

I am working on CFT which pulls code from GitHub with 2.0 OAuth app version and my buildspec needs git metadata to work with. if my requirement is unclear, [look at this feature in aws docs](https://docs.aws.amazon.com/codepipeline/latest/userguide/tutorials-github-gitclone.html#tutorials-github-gitclone-pipeline) for better understanding. Below is the code I have for CFT ```yaml CodePipelineGitHub: Type: AWS::CodePipeline::Pipeline Properties: RoleArn: !Ref CodePipelineServiceRole ArtifactStore: Type: S3 Location: !Ref CodePipelineArtifactBucket Stages: - Name: source Actions: - Name: aa-source ActionTypeId: Category: Source Owner: AWS Version: 1 Provider: CodeStarSourceConnection Configuration: ConnectionArn: !Ref ConnectionArn FullRepositoryId: !Ref GitSourceRepo #"some-user/my-repo" BranchName: !Ref GitBranch OutputArtifacts: - Name: SourceArtifact RunOrder: 1 ``` But from GUI, we have option to get the .git metadata into the source output artifact. Please provide a solution to get the git metadata into the build stage.

We have a CodeBuild jobs that connect to our RDS databases using TLS. For that we need to grab the AWS RDS CA Bundle file, which we download using `curl`. ``` curl https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem --create-dirs -o $MYSQL_SSLCA ``` Everything works fine most of the time, but every once in a while we get a `SSL_ERROR_ZERO_RETURN` error after it tried to download the file for 60 seconds. If we rerun the job everything works fine. ``` % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:02 --:--:-- 0 .... 0 0 0 0 0 0 0 0 --:--:-- 0:00:52 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:53 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:53 --:--:-- 0 curl: (35) OpenSSL SSL_connect: SSL_ERROR_ZERO_RETURN in connection to s3.amazonaws.com:443 ``` My question is, why is this happening? I was under the impression that S3 was more robust than this. Is there some problem with this request? Is anyone else seeing this problem? We're not even running that many CodeBuild jobs. maybe 100 / week, and I've seen this problem enough to recognize it.

Using AWS CodePipeline and setting a Source, Build and passing `taskdef.json` and `appspec.yaml` as artifacts, the deployment action `Amazon ECS (Blue/Green)` will fail with the error: STRING_VALUE can not be converted to an Integer This error does not specify where this error happens and therefore it is not possible to fix. For reference, the files look like this: ```yaml # appspec.yaml version: 0.0 Resources: - TargetService: Type: AWS::ECS::Service Properties: TaskDefinition: <TASK_DEFINITION> LoadBalancerInfo: ContainerName: "my-project" ContainerPort: 3000 ``` ```json // taskdef.json { "family": "my-project-web", "taskRoleArn": "arn:aws:iam::1234567890:role/ecsTaskRole-role", "executionRoleArn": "arn:aws:iam::1234567890:role/ecsTaskExecutionRole-web", "networkMode": "awsvpc", "cpu": "256", "memory": "512", "containerDefinitions": [ { "name": "my-project", "memory": "512", "image": "01234567890.dkr.ecr.us-east-1.amazonaws.com/my-project:a09b7d81", "environment": [], "secrets": [ { "name": "APP_ENV", "valueFrom": "arn:aws:secretsmanager:us-east-1:1234567890:secret:web/my-project-NBcsLj:APP_ENV::" }, { "name": "PORT", "valueFrom": "arn:aws:secretsmanager:us-east-1:1234567890:secret:web/my-project-NBcsLj:PORT::" }, { "name": "APP_NAME", "valueFrom": "arn:aws:secretsmanager:us-east-1:1234567890:secret:web/my-project-NBcsLj:APP_NAME::" }, { "name": "LOG_CHANNEL", "valueFrom": "arn:aws:secretsmanager:us-east-1:1234567890:secret:web/my-project-NBcsLj:LOG_CHANNEL::" }, { "name": "APP_KEY", "valueFrom": "arn:aws:secretsmanager:us-east-1:1234567890:secret:web/my-project-NBcsLj:APP_KEY::" }, { "name": "APP_DEBUG", "valueFrom": "arn:aws:secretsmanager:us-east-1:1234567890:secret:web/my-project-NBcsLj:APP_DEBUG::" } ], "essential": true, "logConfiguration": { "logDriver": "awslogs", "options": { "awslogs-group": "", "awslogs-region": "", "awslogs-stream-prefix": "" } }, "portMappings": [ { "hostPort": 3000, "protocol": "tcp", "containerPort": 3000 } ], "entryPoint": [ "web" ], "command": [] } ], "requiresCompatibilities": [ "FARGATE", "EC2" ], "tags": [ { "key": "project", "value": "my-project" } ] } ``` Any insights on this issue are highly appreciated!

Hello guys, I have a pipeline Source -> CodeBuild -> Deploy And I have two actions in the CodeBuild. I found out if one of the action of failed, the pipeline will stop. This action in CodeBuild is optional to the project, so I want to continue the pipeline to Deploy even the action is failed in CodeBuild. Thanks!

Hi, It seems that whatever I do I can't get CodeBuild to build my Ruby project. I need Ruby version 2.7.4 so as always I added `.ruby-version` file in the root folder of my app with ruby-2.7.4 but the build fails with error: ``` rbenv: version `ruby-2.7.4' is not installed ``` I set ruby-2.6 in my `.ruby-version` but the build fails again with error ``` rbenv: version `ruby-2.6' is not installed ``` I tried installing proper Ruby version at build so I set this command: ``` pre_build: commands: - rbenv install 2.7.4 ``` but I get the same error: ``` rbenv: version `ruby-2.6' is not installed ``` What am I doing wrong? What am I missing?

Hi, I am trying to get my CDK Stacks deployed automatically via CodePipeline. The pipeline works but it won't get triggered from any commits on my GitHub Repository. I've created an issue for that: https://github.com/aws/aws-cdk/issues/18656 Basically the code looks like that ```ts const githubConnection = pipelines.CodePipelineSource.connection( "org/repo", "main", { connectionArn: ARN triggerOnPush: true, } ); ``` ```ts const pipeline = new pipelines.CodePipeline(this, "CdkPipeline", { synth: new pipelines.ShellStep("Synth", { input: githubConnection, installCommands: ["yarn install --frozen-lockfile"], commands: ["npx cdk synth"], }), }); ```

Images (from the src/assets/images/ folder) that show on the local version of the Angular application do not appear on the 'front end' version of the deployed Angular application. 1. I can see the jpeg file in the CodeCommit repository so it pushed during the commit 2. I believe that Angular copies all the files from the 'assets' folder across to the 'dist' folder during the compilation (based on the angular.json file). I checked -- the assets tag, and the folder 'src/assets' is in the angular.json file 3. The fetch returns a '200' code Not sure how to troubleshoot at this point

Is there a best practice workaround for the Codebuild Action Configurator 1000 Character limit? Ref: https://docs.aws.amazon.com/codepipeline/latest/userguide/reference-variables.html. The customer has hit an obscure error with CodeBuild Action Configuration blocks for defining environment variables.

I'm new to AWS CodeBuild and i'm stuck when trying to setup a build project for a container image that is suppose to be pushed to ECR then run on Fargate. I have used the sample buildspec from this tutorial https://docs.aws.amazon.com/codepipeline/latest/userguide/ecs-cd-pipeline.html For some reason the build fails during PRE_BUILD and it looks to me that codebuild dosent recognize the AWS cli commands? Below is the output to Cloudwatch: ``` [Container] 2022/01/22 20:03:29 Running command echo Logging in to Amazon ECR... Logging in to Amazon ECR... [Container] 2022/01/22 20:03:29 Running command aws --version /codebuild/output/tmp/script.sh: 4: aws: not found [Container] 2022/01/22 20:03:29 Command did not exit successfully aws --version exit status 127 [Container] 2022/01/22 20:03:29 Phase complete: PRE_BUILD State: FAILED [Container] 2022/01/22 20:03:29 Phase context status code: COMMAND_EXECUTION_ERROR Message: Error while executing command: aws --version. Reason: exit status 127 ``` I'm thankful for all the help i can get, thanks in advance!

Hello. I know I can pull multiple Source actions (e.g. 2 GitHub repos) into a CodeBuild step by adding multiple Source Artifacts. It would seem that i should follow the same pattern (e.g. $CODEBUILD_SRC_DIR__<secondary_artifact_name>) where individual CodeBuild actions are producing and consuming artifacts. In my case, my consuming step needs the following inputs: 1. Source input (primary source, to get my buildspec.yml) 2. The output of a prior CodeBuild step (a couple of files). I am successful in setting up the Input/Output artifacts in my pipeline and validating that the zipped files are placed into the pipeline s3 bucket. Its all good up until that point. However, when I run the consuming step and troll the file system I do not see anything like $CODEBUILD_SRC_DIR__<secondary_artifact_name>. Is this scenario supported? if so, how do I reference the secondary artifacts in my CodeBuild buildspec? Thanks Dave

Hi, Desperately seeking some help!!!! I have to pay a bonus of $1 to 450 workers (two different tasks on M-Turk) as a requirement of my survey design for my PhD. To do this task one by one will take many hours, but I was told the following by Amazon; Bonus to Workers on the UI can only be done individually. You can find steps for doing so here: https://docs.aws.amazon.com/AWSMechTurk/latest/RequesterUI/GivingaBonus.html Bonus to Workers using the API is also individually, however, you can write a custom code to programmatically work through a list of Worker IDs and assignment IDs to bonus multiple Workers at a time. This isn’t something we can assist with. Here is our documentation to bonus Workers individually using API: https://docs.aws.amazon.com/AWSMechTurk/latest/AWSMturkAPI/ApiReference_SendBonusOperation.html Is there anyone who can help me with the second option (assuming it will be quicker). I am not confident with code, but didn't realise paying a bonus to all workers in a hit would be so hard. Any help would be amazing as I'm a little worried how long it will take me to award these bonuses one by one. Thank you!!!

I have an api in TypeScript that i would like to deploy to a Lambda function. The project has dependencies that needs to be compiled on the platform it's running on, so I need a build step that can do the build on Linux machine in aws before it deploys. How can I leverage the CDK, codepipeline (or codebuild?) to do this? Following the [workshop](https://cdkworkshop.com/20-typescript.html) its super easy to get going with the pipeline that can deploy a "hello world" lambda, but I'm struggling to advance with this. How can I compile the TS code as a step in the pipeline, or how can set up a step in the pipeline that pulls code from another repo and then compiles and deploys it? I've tried to use the aws-cdk-lib/aws-lambda-nodejs constructor that claims to compile automatically. But, so far the pipelines crashes on the 2. step (build step in the pipeline self mutate process) because it can't find the dependencies in the Lamba. /lambda - package-lock.json - package.json - graph.js: ``` import { ApolloServer, gql } from 'apollo-server-lambda' import { ApolloServerPluginLandingPageGraphQLPlayground } from 'apollo-server-core' const typeDefs = gql` type Query { hello: String } `; const resolvers = { Query: { hello: () => 'Hello world!', }, }; const server = new ApolloServer({ typeDefs, resolvers, introspection: true, plugins: [ApolloServerPluginLandingPageGraphQLPlayground] }); exports.handler = server.createHandler(); ``` /lib: - pipeline-stack ``` ...imports... export class PipelineStack extends cdk.Stack { constructor(scope: Construct, id: string, props?: cdk.StackProps) { super(scope, id, props); const pipeline = new CodePipeline(this, '*ID', { pipelineName: '*NAME', synth: new CodeBuildStep('*ID', { input: CodePipelineSource.connection('*ghaccount/ghrepo', '*branch', { connectionArn: "*GHCONNECTION ARN" }), installCommands: ['npm install -g aws-cdk-lib'], commands: [ 'npm ci', 'npm run build', 'npx cdk synth' ] }) }) pipeline.addStage(new PipelineStage(this, 'Deploy', { env: { account: process.env.CDK_DEFAULT_ACCOUNT, region: process.env.CDK_DEFAULT_REGION } })) } } ``` - pipeline-stage.ts - ``` import * as cdk from 'aws-cdk-lib'; import { Construct } from "constructs"; import { LambdaStack } from './server-stack'; export class PipelineStage extends cdk.Stage { constructor(scope: Construct, id: string, props?: cdk.StageProps) { super(scope, id, props); // services / resources the app needs to run goes here ->> const lambdaStack = new LambdaStack(this, 'LambdaStack'); } } ``` - server-stack.ts ``` export class LambdaStack extends cdk.Stack { public readonly api: apiGateway.RestApi constructor(scope: Construct, id: string, props?: cdk.StackProps) { super(scope, id, props) const graphqlLambda = new NodeLambda.NodejsFunction(this, 'adeegso-api-lambda', { entry: path.join(__dirname, '/../lambda/graph.ts'), handler: 'graph.handler', depsLockFilePath: "lambda/package-lock.json", }) this.api = new apiGateway.LambdaRestApi(this, 'adeegso-api-endpoint', { handler: graphqlLambda, }) } } ``` Thanks in advance for any help provided!

I created a CodeBuild project for a .Net Framework repo in BitBucket cloud. The project is using OAuth to connect to BB Cloud. The build runs successfully and creates artifacts in S3. Next, I created a CodePipeline using this CodeBuild project. The pipeline wizard forces me to select a Bitbucket app or create a new one to connect to the BB Cloud repo. I've tried using the apps there as well as using the install new app method and have the same problem outlined below. The apps that are already installed were created with my AWS account. **Problem:** I am getting a build error when trying to pull from the Bitbucket cloud repo. The build error is: > authorization failed for primary source and source version I have a user in my Bitbucket Cloud repo with admin privs for my AWS email...which is why my CodeBuild project works. So I'm not sure why I am still having this problem via the Pipeline using the same codebuild. Any thoughts?

Hi, getting the following on a CodeBuild project. Any help would be appreciated. "Build failed to start. The following error occurred: Cannot have more than 0 builds in queue for the account"

Hello, I create a new pipeline for my application and the pipeline failed in the Build parts. the error is : **Error calling startBuild: Cannot have more than 0 builds in queue for the account (Service: AWSCodeBuild; Status Code: 400; Error Code: AccountLimitExceededException;** Thank you for helping me.

I created an AWS Lambda Application using the Nodejs template. https://us-east-2.console.aws.amazon.com/lambda/home?region=us-east-2#/applications This uses the following image for CodeBuild. ``` Image: aws/lambda/nodejs:10-1.0 ``` I see this inside the serverlessrepo-APP_NAME-toolchain stack under the `template` tab https://us-east-2.console.aws.amazon.com/cloudformation/home?region=us-east-2#/stacks/template Is there a way to change this image for the stack? I'd like to have java jdk with gradle installed in addition to nodejs. I'm am currently trying to do a workaround where I install java, gradle and set the environment variables during the install phase in the `buildspec.yml`, but that is a hacky workaround that will slow down the build pipeline. Can I modify the stack image after it's been created? I only saw an option to make a new stack that is a modification of a previous stack, but the previous stack is left unchanged. Here's the `buildspec.yml` with the workaround. It's still failing to install java correctly so the build is failing, but I think this is the wrong approach anyway. I should be updating the build image so it's ready to go. https://github.com/bennebbenneb/sample-app/blob/master/buildspec.yml#L4

When I run codebuild locally it creates the default docker network and volumes as in the below output. Is there a way to use different bridge network and volumes instead of these default ones? I tried modifying the docker command in [codebuild_build.sh](https://github.com/aws/aws-codebuild-docker-images/blob/master/local_builds/codebuild_build.sh) to add a network (below build command output shows `--network mylocaltestingnetwork`) but that didn't help as such. The reason I am trying to use a different network and volumes is because I am using [localstack](https://localstack.cloud/) along with it, and the bridge network and volumes need to be accessible from the codebuild local container. If I configure my localstack to use the `agent-resources_default` network created by local codebuild then codebuild is able to access localstack. But, I would like to keep the dependency external to both codebuild and localstack by using a separate bridge network. ``` $ ./codebuild_build.sh -i public.ecr.aws/codebuild/amazonlinux2-x86_64-standard:3.0 -a codebuild-output/ -b buildspec-local.yml -c -p localstack Build Command: docker run -it -v /var/run/docker.sock:/var/run/docker.sock -e "IMAGE_NAME=public.ecr.aws/codebuild/amazonlinux2-x86_64-standard:3.0" -e "ARTIFACTS=<repo path>/codebuild-output/" --network mylocaltestingnetwork -e "SOURCE=<repo path>" -e "BUILDSPEC=<repo path>/buildspec-local.yml" -e "AWS_CONFIGURATION=<homedir>/.aws" -e "AWS_PROFILE=localstack" -e "INITIATOR=<user>" public.ecr.aws/codebuild/local-builds:latest Removing network agent-resources_default Removing volume agent-resources_source_volume Removing volume agent-resources_user_volume Creating network "agent-resources_default" with the default driver Creating volume "agent-resources_source_volume" with local driver Creating volume "agent-resources_user_volume" with local driver Creating agent-resources_agent_1 ... done Creating agent-resources_build_1 ... done Attaching to agent-resources_agent_1, agent-resources_build_1 agent_1 | [Container] 2022/01/14 15:57:15 Waiting for agent ping agent_1 | [Container] 2022/01/14 15:57:17 Waiting for DOWNLOAD_SOURCE agent_1 | [Container] 2022/01/14 15:57:23 Phase is DOWNLOAD_SOURCE ```

I have a ruby project and I am trying to build via AWS codedeploy and having some issues specifying the ruby version. I am using Ruby 2.6.5 and I am using AWS Codedeploy standard image (aws/codebuild/standard:2.0) because according to the [docs][1] it supports Ruby 2.6.5. `.ruby-version` has 2.6.5. I also attempted a build where I put "runtime-versions: ruby: 2.6.5" in the buildspec but that threw the following error: "Phase context status code: YAML_FILE_ERROR Message: Unknown runtime version named '2.6.5' of ruby. This build image has the following versions: 2.6". This is my buildspec. ``` version: 0.2 phases: install: runtime-versions: ruby: 2.6.5 commands: - echo Installing Bundler... - gem install bundler -v 2.2.27 - bundle install build: commands: - bundle exec rspec ``` I also tried using `aws/codebuild/amazonlinux2-x86_64-standard:3.0-20.03.13` image version from AL Standard 3.0 image instead of the latest but I get the same error while on github I see ruby version 2.6.5 has been added https://github.com/aws/aws-codebuild-docker-images/tree/20.03.13. I also tried Ubuntu Standard 5.0 and same thing. What am I missing? [1]: https://github.com/aws/aws-codebuild-docker-images/blob/master/al2/x86_64/standard/2.0/Dockerfile#L320

I made an AWS Lambda Application with some NodeJS lambda and layer resources. Now I'm trying to add a Java lambda resource to this project, but running into issues after deploying to AWS. Here's the source code for the project that is hooked up to the AWS Lambda Application CI/CD pipeline. https://github.com/bennebbenneb/sample-app When I run this project on localhost I am able to invoke the Java lambda successfully. When I deploy this project it is unable to find the class. Here's the error I see in CloudWatch ``` Class not found: helloworld.App: java.lang.ClassNotFoundException java.lang.ClassNotFoundException: helloworld.App. Current classpath: file:/var/task/ ``` Here's how I am running this project on localhost. First I run `sam build` which creates a `./.aws-sam/` folder with all the lambdas. Then I run `sam local start-api --host 0.0.0.0`. After that I invoke the localhost endpoint and get the hello world response successfully. I've tried adding `sam build` to the build script in `buildspec.yml`, but it throws errors saying `Architectures` is not a valid config setting and then when I removed that it said `nodejs14.x` is not a valid value for `Runtime`. What do I need to change to get the Java classes to load without breaking the current NodeJS lambdas?

I'm trying to create CI/CD with Jenkins by following this AWS workshop https://third-party-integration-codebuild-codedeploy-plugins.workshop.aws/en/access.html and I am stuck at point 1. When I go to the Jenkins server URL it is not reachable from internet. I've verified my IP range from which I can connect to and it's correct. I've verified that the subnet the server was provisioned to has the IP CIDR range 172.31.32.0/20 and it is associated with a route table that has an entry to route all traffic 0.0.0.0/0 to Internet Gateway. I can SSH to it but can't access it from the browser. What am I missing?

I have two, almost identical, EventBridge Rules and one runs but the other fails and I don't know why. These rules both run a CodeBuild job to rebuild our database every Saturday morning. They are generated with almost identical CloudFormation stacks doing almost the exact same thing. If I run the CodeBuild jobs manually, it works fine, so I don't think it's the job itself. However, one EventBridge Rule runs every week and the other fails. Since EventBridge doesn't generate any logs of any kind, how can I determine what the problem is? I've tried moving the cron() schedule around to see if there is some sort of issue, but nothing seems to work. The Rule fires and fails, every time.

Hello, I'm preparing CI/CD using AWS CodePipeline. Unfortunatelly I have an error during build stage. Below there is content of my buildspec.yml file, where: AWS_DEFAULT_REGION = eu-central-1 CONTAINER_NAME=cicd-1-app REPOSITORY_URI = <ACCOUNT_ID>.dkr.ecr.eu-central-1.amazonaws.com/cicd-1-app ``` version: 0.2 phases: install: runtime-versions: java: corretto11 pre_build: commands: - echo Logging in to Amazon ECR... - aws --version - TAG="$(echo $CODEBUILD_RESOLVED_SOURCE_VERSION | head -c 8)" - IMAGE_URI=${REPOSITORY_URI}:${TAG} build: commands: - echo Build started on `date` - echo $IMAGE_URI - mvn clean package -Ddockerfile.skip - docker build --tag $IMAGE_URI . post_build: commands: - printenv - echo Build completed on `date` - echo $(docker images) - echo Pushing docker image - aws ecr get-login-password --region $AWS_DEFAULT_REGION | docker login --username AWS --password-stdin <ACCOUNT_ID>.dkr.ecr.eu-central-1.amazonaws.com - docker push $IMAGE_URI - echo push completed - printf '[{"name":"%s","imageUri":"%s"}]' $CONTAINER_NAME $IMAGE_URI > imagedefinitions.json artifacts: files: - imagedefinitions.json ``` I got error: ``` [Container] 2022/01/06 19:57:36 Running command aws ecr get-login-password --region $AWS_DEFAULT_REGION | docker login --username AWS --password-stdin <ACCOUNT_ID>.dkr.ecr.eu-central-1.amazonaws.com WARNING! Your password will be stored unencrypted in /root/.docker/config.json. Configure a credential helper to remove this warning. See https://docs.docker.com/engine/reference/commandline/login/#credentials-store Login Succeeded [Container] 2022/01/06 19:57:37 Running command docker push $IMAGE_URI The push refers to repository [<ACCOUNT_ID>.dkr.ecr.us-east-1.amazonaws.com/cicd-1-app] 37256fb2fd27: Preparing fe6c1ddaab26: Preparing d4dfab969171: Preparing no basic auth credentials [Container] 2022/01/06 19:57:37 Command did not exit successfully docker push $IMAGE_URI exit status 1 [Container] 2022/01/06 19:57:37 Phase complete: POST_BUILD State: FAILED [Container] 2022/01/06 19:57:37 Phase context status code: COMMAND_EXECUTION_ERROR Message: Error while executing command: docker push $IMAGE_URI. Reason: exit status 1 ``` Even docker logged in successfully there is "no basic auth credentials" error. Do you know what could be a problem? Best regards.

How can we deploy our code on IIS server using azure pipeline via aws?

When deploying from code pipeline using codebuild, I am getting some extra headers on the S3 objects with information about codebuild. These headers show information such as codebuild arn including the account id. I feel this is too sensitive information to make public. Is there any way not to have these headers on S3 and thus make it public? I have looked into S3deployaction of the CDK which I am using to deploy but there are no properties controlling these headers. There doesn't seem much information about these headers on the documentation pages also. Below are the headers which are showing up on the browser when the files are loaded from S3. ``` x-amz-meta-codebuild-content-sha256: _________ x-amz-meta-codebuild-buildarn: arn:aws:codebuild:us-east-1:_____:build/CodeBuild______-_____:_____ x-amz-meta-codebuild-content-md5: _____ ```

Hi - We started using CodeBuild with source at GitHub. Since we did not want to build on every source push/pull request in Git hub we tried to use the Build Trigger feature with interval set to hour. We are noticing unlike other build systems we have worked with like Jenkins, the CodeBuild blindly rebuilds the source every hour instead of checking if the source code actually changed in GitHub. Is this how its supposed to work? It's a waste of resources to be blindly building. I am not sure what use is the periodic trigger. Or perhaps I am missing something in the setup. GitHub v2 OAuth connector is being used for CodeBuild to access our GitHub repo.

I've set up a CodePipeline stage with multiple CodeBuild projects with all the same runOrder. From visually inspecting the CodePipeline UI in the console, all of the CodeBuild projects are horizontally next to each other (so they should run at the same time). The CodeBuild projects all start at the same time, however, all of them stay in the "PROVISIONING" stage except for one. Once that one Project finishes building, another project will move out of "PROVISIONING". This repeats for the entire stage, essentially nullifying any parallelization. Does anyone know why this is happening? My one hypotheses is that I'm using the same source for all the projects, so maybe CodePipeline is locking the source? I can provide more information if needed. We have 10 different services that need to be built in our pipeline, so if we can parallelized the builds, it can save a lot of time.

I am running codepipeline with codebuild, I can pull the repo, however, I cannot pull the LFS large files. I have followed various guides on the internet, but have come to realize that codestar is not trying to connect to bitbucket LFS. In the bitbucket history I see the regular clone request but do not see the git lfs request. Codestar seems to be acting as a proxy I am enclosing my buildpec.yml and some logs. It fails at line `git lfs pull` ``` phases: install: commands: - cd /tmp/ - curl -OJL https://github.com/git-lfs/git-lfs/releases/download/v2.13.3/git-lfs-linux-amd64-v2.13.3.tar.gz - tar xzf git-lfs-linux-amd64-v2.13.3.tar.gz - ./install.sh - cd $CODEBUILD_SRC_DIR - git lfs pull build: commands: - echo Build started on `date` - echo Building the Docker image... - docker build -f ci/Dockerfile -t system1.datagen.tech:5000/dg-simulated-reality-ecr:teststeve . post_build: commands: - echo Build completed on `date` - echo Pushing the Docker images... - docker push system1.datagen.tech:5000/dg-simulated-reality-ecr:teststeve - echo Writing image definitions file... ``` aws logs ``` [Container] 2021/12/28 14:06:47 Running command git lfs pull batch response: Authorization error: https://codestar-connections.us-east-1.amazonaws.com/git-http/ACCOUNTNUMBER/us-east-1/ARNSTUFF/MYCOMPANY/MYREPO.git/info/lfs/objects/batch Check that you have proper access to the repository ........ [Container] 2021/12/28 14:06:47 Command did not exit successfully git lfs pull exit status 2 [Container] 2021/12/28 14:06:47 Phase complete: INSTALL State: FAILED [Container] 2021/12/28 14:06:47 Phase context status code: COMMAND_EXECUTION_ERROR Message: Error while executing command: git lfs pull. Reason: exit status 2 ```

Similar to this answer to a related question: https://stackoverflow.com/a/59968374/2092250 My question is, is it possible to specify to the array to loop over as a vanilla list? So instead of: ```lang-yaml - folders=`ls` - for value in $folders; do echo $value; done - echo "run the next command" ``` I'd like to do: ```lang-yaml - folders=[a,b,c] - for value in $folders; do echo $value; done - echo "run the next command" ``` I'm new to YAML/CodeBuild, so I assume this is possible and I just have the syntax wrong somehow.

I have a CodePipeline configured with my single GitHub repo to trigger build & deploy on any commit. My repo contains dozens of individual lambda functions. The pre_build step does a full clean & restore. Then in the build step, I have a long list of commands like this: ```lang-yaml - dotnet build -c Debug - cd folder1 - dotnet lambda deploy-function --configuration Debug --region $Region --config-file aws-lambda-tools-test.json - cd ../folder2 - dotnet lambda deploy-function --configuration Debug --region $Region --config-file aws-lambda-tools-test.json - cd ../folder3 - dotnet lambda deploy-function --configuration Debug --region $Region --config-file aws-lambda-tools-test.json ``` My question is, is there any way for me to execute these deployments in parallel?

Is there a way to send an SNS event only when all batch builds in a Codebuild project are completed (succeeded or failed)? I seem to only be able to create notifications that trigger when the individual builds in the batch complete, not when the entire batch is complete.