awslabs / awslabs/aws-codebuild-jenkins-plugin
Possible to use temporary credentials by assume-role
- Dominant language
- Java
- Stars
- 156
- Forks
- 130
- PR merge metrics
- No merged PRs in 30d
Description
I am not sure if CodeBuild plugin can use temporary credentials like codedeploy plugin does.
Our use case is Jenkins is running in 1 AWS account but the CodeBuild project is located in another AWS account, to start the CodeBuild project that we would like to use IAM role in the first AWS account but assume to a role in the 2nd AWS account with approprite permission.
CodeDeploy has this feature, https://github.com/awslabs/aws-codedeploy-plugin/blob/6b74409a2f44faf712ca704ba095cac95fdc5c42/src/main/resources/com/amazonaws/codedeploy/AWSCodeDeployPublisher/help-iamRoleArn.html
Thanks in advance.
Contributor guide
Research direction
Start by reading the CodeDeploy iamRoleArn reference linked in the issue and then trace how the CodeBuild Jenkins plugin currently obtains credentials and starts a build. Define the required cross-account role and permission flow; the work is done when a Jenkins account can assume the target account's role and start the CodeBuild project with temporary credentials.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, java
- Domain
- authorization, ci-cd, cloud
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100