awslabs / awslabs/aws-codebuild-jenkins-plugin

Possible to use temporary credentials by assume-role

Open
#93 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
156
Forks
130
PR merge metrics
No merged PRs in 30d

Description

I am not sure if CodeBuild plugin can use temporary credentials like codedeploy plugin does.

Our use case is Jenkins is running in 1 AWS account but the CodeBuild project is located in another AWS account, to start the CodeBuild project that we would like to use IAM role in the first AWS account but assume to a role in the 2nd AWS account with approprite permission.

CodeDeploy has this feature, https://github.com/awslabs/aws-codedeploy-plugin/blob/6b74409a2f44faf712ca704ba095cac95fdc5c42/src/main/resources/com/amazonaws/codedeploy/AWSCodeDeployPublisher/help-iamRoleArn.html

Thanks in advance.

Contributor guide

Open the contributing guide

Research direction

Start by reading the CodeDeploy iamRoleArn reference linked in the issue and then trace how the CodeBuild Jenkins plugin currently obtains credentials and starts a build. Define the required cross-account role and permission flow; the work is done when a Jenkins account can assume the target account's role and start the CodeBuild project with temporary credentials.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, java
Domain
authorization, ci-cd, cloud
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.