cdklabs / cdklabs/deploy-time-build
Cross-account deployment for SOCI index
Open
- Dominant language
- TypeScript
- Stars
- 12
- Forks
- 1
- Avg merge
- 12h 28m
- Merged PRs (30d)
- 2
Description
We should be able to push SOCI index from/to an ECR repository in other AWS account. What we should change:
1. SociIndexBuild now receives `role` property
2. If `role` is set, CodeBuild job runs `assumeRole` to the role in the buildspec.
3. When interacting with the repository, the credentials from assumed role is used.
The account ID can be retrieved from the credential (`aws sts get-caller-identity`), but we might want to change its region. Currently the region is set to the CodeBuild region by default. Maybe we should pass a repostiory's full ARN instead of its name.
(Copied from https://github.com/tmokmss/deploy-time-build/issues/48)
Contributor guide
Assessment
This issue has not been assessed yet.