aws / aws/apprunner-roadmap

Custom IAM role/policy for build stage for source code

Open
#199 0 comments 5 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
301
Forks
15
PR merge metrics
No merged PRs in 30d

Description

**Community Note**
* Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do * not help prioritize the request
If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**
Currently App Runner does not work with retrieving code from private CodeArtifact repositories during the build process. To access a pip repository on CodeArtifact, one must login via aws cli, which requires the right IAM credentials. However, App Runner uses a custom created role in the build process (which cannot access CodeArtifact) and not the provided IAM role.
To fix this issue, it should be possible to supply an IAM role/policy for the build process as well.

**Describe alternatives you've considered**
As an alternative, one could supply access keys for an IAM user with access to CodeArtifact, however this approach has security concerns and cannot be implemented via cloudformation.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.