Feature: support to push only fast-forward changes into protected branches

We are trying to implement protected branches in CodeCommit. Protected branches do not allow to alter the commit history by force-pushing non-fast-forward changes. The `codecommit:MergePullRequestByFastForward` IAM action applies to the console and API only, while all Git client write operations are permitted via the `codecommit:GitPush` IAM action. Since `codecommit:GitPush` lacks a condition keys to limit clients to fast-forward pushes only, there is no way to protect a branch without denying all Git client write access for it and use solely API actions to manage this branch instead. There are certain Git-Workflows and automations that do not rely on concepts like merge/pull requests and thus do not require API/console access, which are blocked by this.

I would like to request an IAM condition key to restrict Git clients to fast-forward pushes for protected branches.

I'm aware that this is a service side feature request, but the support directed me here anyway. Please review Case ID 171696449600152 for this.

La issue non indica file del repository, test o punti di ingresso; occorre innanzitutto verificare se git-remote-codecommit possa influire sull’applicazione di AWS CodeCommit IAM. Per considerare il lavoro completato servirebbe un ambito del repository attuabile oppure un percorso di implementazione lato servizio AWS, ma qui non ne viene specificato nessuno dei due.

Scritto dal modello di indicizzazione a partire dal testo della issue.