aws / aws/git-remote-codecommit

Feature: support to push only fast-forward changes into protected branches

Open
#54 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
289
Forks
40
PR merge metrics
No merged PRs in 30d

Description

We are trying to implement protected branches in CodeCommit. Protected branches do not allow to alter the commit history by force-pushing non-fast-forward changes. The `codecommit:MergePullRequestByFastForward` IAM action applies to the console and API only, while all Git client write operations are permitted via the `codecommit:GitPush` IAM action. Since `codecommit:GitPush` lacks a condition keys to limit clients to fast-forward pushes only, there is no way to protect a branch without denying all Git client write access for it and use solely API actions to manage this branch instead. There are certain Git-Workflows and automations that do not rely on concepts like merge/pull requests and thus do not require API/console access, which are blocked by this.

I would like to request an IAM condition key to restrict Git clients to fast-forward pushes for protected branches.

I'm aware that this is a service side feature request, but the support directed me here anyway. Please review Case ID 171696449600152 for this.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.