AWS CLI version 2, the latest major version of AWS CLI, is now stable and recommended for general use. To view this page for the AWS CLI version 2, click here. For more information see the AWS CLI version 2 installation instructions and migration guide.
stop-build-batch
--id <value>
[--cli-input-json <value>]
[--generate-cli-skeleton <value>]
[--debug]
[--endpoint-url <value>]
[--no-verify-ssl]
[--no-paginate]
[--output <value>]
[--query <value>]
[--profile <value>]
[--region <value>]
[--version <value>]
[--color <value>]
[--no-sign-request]
[--ca-bundle <value>]
[--cli-read-timeout <value>]
[--cli-connect-timeout <value>]
--id
(string)
The identifier of the batch build to stop.
--cli-input-json
(string)
Performs service operation based on the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton
. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally.
--generate-cli-skeleton
(string)
Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input
, prints a sample input JSON that can be used as an argument for --cli-input-json
. If provided with the value output
, it validates the command inputs and returns a sample output JSON for that command.
--debug
(boolean)
Turn on debug logging.
--endpoint-url
(string)
Override command's default URL with the given URL.
--no-verify-ssl
(boolean)
By default, the AWS CLI uses SSL when communicating with AWS services. For each SSL connection, the AWS CLI will verify SSL certificates. This option overrides the default behavior of verifying SSL certificates.
--no-paginate
(boolean)
Disable automatic pagination. If automatic pagination is disabled, the AWS CLI will only make one call, for the first page of results.
--output
(string)
The formatting style for command output.
--query
(string)
A JMESPath query to use in filtering the response data.
--profile
(string)
Use a specific profile from your credential file.
--region
(string)
The region to use. Overrides config/env settings.
--version
(string)
Display the version of this tool.
--color
(string)
Turn on/off color output.
--no-sign-request
(boolean)
Do not sign requests. Credentials will not be loaded if this argument is provided.
--ca-bundle
(string)
The CA certificate bundle to use when verifying SSL certificates. Overrides config/env settings.
--cli-read-timeout
(int)
The maximum socket read time in seconds. If the value is set to 0, the socket read will be blocking and not timeout. The default value is 60 seconds.
--cli-connect-timeout
(int)
The maximum socket connect time in seconds. If the value is set to 0, the socket connect will be blocking and not timeout. The default value is 60 seconds.
To use the following examples, you must have the AWS CLI installed and configured. See the Getting started guide in the AWS CLI User Guide for more information.
Unless otherwise stated, all examples have unix-like quotation rules. These examples will need to be adapted to your terminal's quoting rules. See Using quotation marks with strings in the AWS CLI User Guide .
To stop an in-progress batch build in AWS CodeBuild.
The following stop-build-batch
example stops the specified batch build.
aws codebuild stop-build-batch \
--id <project-name>:<batch-ID>
Output:
{
"buildBatch": {
"id": "<project-name>:<batch-ID>",
"arn": "arn:aws:codebuild:<region-ID>:<account-ID>:build-batch/<project-name>:<batch-ID>",
"startTime": "2020-10-21T16:54:24.740000+00:00",
"endTime": "2020-10-21T16:56:05.152000+00:00",
"currentPhase": "STOPPED",
"buildBatchStatus": "STOPPED",
"resolvedSourceVersion": "aef7744ed069c51098e15c360f4102cd2cd1ad64",
"projectName": "<project-name>",
"phases": [
{
"phaseType": "SUBMITTED",
"phaseStatus": "SUCCEEDED",
"startTime": "2020-10-21T16:54:24.740000+00:00",
"endTime": "2020-10-21T16:54:25.039000+00:00",
"durationInSeconds": 0
},
{
"phaseType": "DOWNLOAD_BATCHSPEC",
"phaseStatus": "SUCCEEDED",
"startTime": "2020-10-21T16:54:25.039000+00:00",
"endTime": "2020-10-21T16:54:56.583000+00:00",
"durationInSeconds": 31
},
{
"phaseType": "IN_PROGRESS",
"phaseStatus": "STOPPED",
"startTime": "2020-10-21T16:54:56.583000+00:00",
"endTime": "2020-10-21T16:56:05.152000+00:00",
"durationInSeconds": 68
},
{
"phaseType": "STOPPED",
"startTime": "2020-10-21T16:56:05.152000+00:00"
}
],
"source": {
"type": "GITHUB",
"location": "<GitHub-repo-URL>",
"gitCloneDepth": 1,
"gitSubmodulesConfig": {
"fetchSubmodules": false
},
"reportBuildStatus": false,
"insecureSsl": false
},
"secondarySources": [],
"secondarySourceVersions": [],
"artifacts": {
"location": ""
},
"secondaryArtifacts": [],
"cache": {
"type": "NO_CACHE"
},
"environment": {
"type": "LINUX_CONTAINER",
"image": "aws/codebuild/amazonlinux2-x86_64-standard:3.0",
"computeType": "BUILD_GENERAL1_SMALL",
"environmentVariables": [],
"privilegedMode": false,
"imagePullCredentialsType": "CODEBUILD"
},
"logConfig": {
"cloudWatchLogs": {
"status": "ENABLED"
},
"s3Logs": {
"status": "DISABLED",
"encryptionDisabled": false
}
},
"buildTimeoutInMinutes": 60,
"queuedTimeoutInMinutes": 480,
"complete": true,
"initiator": "Strohm",
"encryptionKey": "arn:aws:kms:<region-ID>:<account-ID>:alias/aws/s3",
"buildBatchNumber": 3,
"buildBatchConfig": {
"serviceRole": "arn:aws:iam::<account-ID>:role/service-role/<project-name>",
"restrictions": {
"maximumBuildsAllowed": 100
},
"timeoutInMins": 480
},
"buildGroups": [
{
"identifier": "DOWNLOAD_SOURCE",
"ignoreFailure": false,
"currentBuildSummary": {
"arn": "arn:aws:codebuild:<region-ID>:<account-ID>:build/<project-name>:<build-ID>",
"requestedOn": "2020-10-21T16:54:25.468000+00:00",
"buildStatus": "SUCCEEDED",
"primaryArtifact": {
"type": "no_artifacts",
"identifier": "DOWNLOAD_SOURCE"
},
"secondaryArtifacts": []
}
},
{
"identifier": "linux_small",
"dependsOn": [],
"ignoreFailure": false,
"currentBuildSummary": {
"arn": "arn:aws:codebuild:<region-ID>:<account-ID>:build/<project-name>:<build-ID>",
"requestedOn": "2020-10-21T16:54:56.833000+00:00",
"buildStatus": "IN_PROGRESS"
}
},
{
"identifier": "linux_medium",
"dependsOn": [
"linux_small"
],
"ignoreFailure": false,
"currentBuildSummary": {
"arn": "arn:aws:codebuild:<region-ID>:<account-ID>:build/<project-name>:<build-ID>",
"requestedOn": "2020-10-21T16:54:56.211000+00:00",
"buildStatus": "PENDING"
}
},
{
"identifier": "linux_large",
"dependsOn": [
"linux_medium"
],
"ignoreFailure": false,
"currentBuildSummary": {
"arn": "arn:aws:codebuild:<region-ID>:<account-ID>:build/<project-name>:<build-ID>",
"requestedOn": "2020-10-21T16:54:56.330000+00:00",
"buildStatus": "PENDING"
}
}
]
}
}
For more information, see Batch builds in AWS CodeBuild in the AWS CodeBuild User Guide.
buildBatch -> (structure)
Contains information about a batch build.
id -> (string)
The identifier of the batch build.arn -> (string)
The ARN of the batch build.startTime -> (timestamp)
The date and time that the batch build started.endTime -> (timestamp)
The date and time that the batch build ended.currentPhase -> (string)
The current phase of the batch build.buildBatchStatus -> (string)
The status of the batch build.sourceVersion -> (string)
The identifier of the version of the source code to be built.resolvedSourceVersion -> (string)
The identifier of the resolved version of this batch build's source code.
- For CodeCommit, GitHub, GitHub Enterprise, and BitBucket, the commit ID.
- For CodePipeline, the source revision provided by CodePipeline.
- For Amazon S3, this does not apply.
projectName -> (string)
The name of the batch build project.phases -> (list)
An array of
BuildBatchPhase
objects the specify the phases of the batch build.(structure)
Contains information about a stage for a batch build.
phaseType -> (string)
The name of the batch build phase. Valid values include:
COMBINE_ARTIFACTSBuild output artifacts are being combined and uploaded to the output location.
DOWNLOAD_BATCHSPECThe batch build specification is being downloaded.
FAILEDOne or more of the builds failed.
IN_PROGRESSThe batch build is in progress.
STOPPEDThe batch build was stopped.
SUBMITTEDThe btach build has been submitted.
SUCCEEDEDThe batch build succeeded.
phaseStatus -> (string)
The current status of the batch build phase. Valid values include:
FAILEDThe build phase failed.
FAULTThe build phase faulted.
IN_PROGRESSThe build phase is still in progress.
STOPPEDThe build phase stopped.
SUCCEEDEDThe build phase succeeded.
TIMED_OUTThe build phase timed out.
startTime -> (timestamp)
When the batch build phase started, expressed in Unix time format.endTime -> (timestamp)
When the batch build phase ended, expressed in Unix time format.durationInSeconds -> (long)
How long, in seconds, between the starting and ending times of the batch build's phase.contexts -> (list)
Additional information about the batch build phase. Especially to help troubleshoot a failed batch build.
(structure)
Additional information about a build phase that has an error. You can use this information for troubleshooting.
statusCode -> (string)
The status code for the context of the build phase.message -> (string)
An explanation of the build phase's context. This might include a command ID and an exit code.source -> (structure)
Information about the build input source code for the build project.
type -> (string)
The type of repository that contains the source code to be built. Valid values include:
BITBUCKET
: The source code is in a Bitbucket repository.CODECOMMIT
: The source code is in an CodeCommit repository.CODEPIPELINE
: The source code settings are specified in the source action of a pipeline in CodePipeline.GITHUB
: The source code is in a GitHub repository.GITHUB_ENTERPRISE
: The source code is in a GitHub Enterprise Server repository.GITLAB
: The source code is in a GitLab repository.GITLAB_SELF_MANAGED
: The source code is in a self-managed GitLab repository.NO_SOURCE
: The project does not have input source code.S3
: The source code is in an Amazon S3 bucket.location -> (string)
Information about the location of the source code to be built. Valid values include:
- For source code settings that are specified in the source action of a pipeline in CodePipeline,
location
should not be specified. If it is specified, CodePipeline ignores it. This is because CodePipeline uses the settings in a pipeline's source action instead of this value.- For source code in an CodeCommit repository, the HTTPS clone URL to the repository that contains the source code and the buildspec file (for example,
https://git-codecommit.<region-ID>.amazonaws.com/v1/repos/<repo-name>
).- For source code in an Amazon S3 input bucket, one of the following.
- The path to the ZIP file that contains the source code (for example,
<bucket-name>/<path>/<object-name>.zip
).- The path to the folder that contains the source code (for example,
<bucket-name>/<path-to-source-code>/<folder>/
).- For source code in a GitHub repository, the HTTPS clone URL to the repository that contains the source and the buildspec file. You must connect your Amazon Web Services account to your GitHub account. Use the CodeBuild console to start creating a build project. When you use the console to connect (or reconnect) with GitHub, on the GitHub Authorize application page, for Organization access , choose Request access next to each repository you want to allow CodeBuild to have access to, and then choose Authorize application . (After you have connected to your GitHub account, you do not need to finish creating the build project. You can leave the CodeBuild console.) To instruct CodeBuild to use this connection, in the
source
object, set theauth
object'stype
value toOAUTH
.- For source code in an GitLab or self-managed GitLab repository, the HTTPS clone URL to the repository that contains the source and the buildspec file. You must connect your Amazon Web Services account to your GitLab account. Use the CodeBuild console to start creating a build project. When you use the console to connect (or reconnect) with GitLab, on the Connections Authorize application page, choose Authorize . Then on the CodeConnections Create GitLab connection page, choose Connect to GitLab . (After you have connected to your GitLab account, you do not need to finish creating the build project. You can leave the CodeBuild console.) To instruct CodeBuild to override the default connection and use this connection instead, set the
auth
object'stype
value toCODECONNECTIONS
in thesource
object.- For source code in a Bitbucket repository, the HTTPS clone URL to the repository that contains the source and the buildspec file. You must connect your Amazon Web Services account to your Bitbucket account. Use the CodeBuild console to start creating a build project. When you use the console to connect (or reconnect) with Bitbucket, on the Bitbucket Confirm access to your account page, choose Grant access . (After you have connected to your Bitbucket account, you do not need to finish creating the build project. You can leave the CodeBuild console.) To instruct CodeBuild to use this connection, in the
source
object, set theauth
object'stype
value toOAUTH
.If you specify
CODEPIPELINE
for theType
property, don't specify this property. For all of the other types, you must specifyLocation
.gitCloneDepth -> (integer)
Information about the Git clone depth for the build project.gitSubmodulesConfig -> (structure)
Information about the Git submodules configuration for the build project.
fetchSubmodules -> (boolean)
Set to true to fetch Git submodules for your CodeBuild build project.buildspec -> (string)
The buildspec file declaration to use for the builds in this build project.
If this value is set, it can be either an inline buildspec definition, the path to an alternate buildspec file relative to the value of the built-in
CODEBUILD_SRC_DIR
environment variable, or the path to an S3 bucket. The bucket must be in the same Amazon Web Services Region as the build project. Specify the buildspec file using its ARN (for example,arn:aws:s3:::my-codebuild-sample2/buildspec.yml
). If this value is not provided or is set to an empty string, the source code must contain a buildspec file in its root directory. For more information, see Buildspec File Name and Storage Location .auth -> (structure)
Information about the authorization settings for CodeBuild to access the source code to be built.
type -> (string)
The authorization type to use. Valid options are OAUTH, CODECONNECTIONS, or SECRETS_MANAGER.resource -> (string)
The resource value that applies to the specified authorization type.reportBuildStatus -> (boolean)
Set to true to report the status of a build's start and finish to your source provider. This option is valid only when your source provider is GitHub, GitHub Enterprise, GitLab, GitLab Self Managed, or Bitbucket. If this is set and you use a different source provider, an
invalidInputException
is thrown.To be able to report the build status to the source provider, the user associated with the source provider must have write access to the repo. If the user does not have write access, the build status cannot be updated. For more information, see Source provider access in the CodeBuild User Guide .
The status of a build triggered by a webhook is always reported to your source provider.
If your project's builds are triggered by a webhook, you must push a new commit to the repo for a change to this property to take effect.
buildStatusConfig -> (structure)
Contains information that defines how the build project reports the build status to the source provider. This option is only used when the source provider is
GITHUB
,GITHUB_ENTERPRISE
, orBITBUCKET
.context -> (string)
Specifies the context of the build status CodeBuild sends to the source provider. The usage of this parameter depends on the source provider.
BitbucketThis parameter is used for the
name
parameter in the Bitbucket commit status. For more information, see build in the Bitbucket API documentation.GitHub/GitHub Enterprise ServerThis parameter is used for the
context
parameter in the GitHub commit status. For more information, see Create a commit status in the GitHub developer guide.targetUrl -> (string)
Specifies the target url of the build status CodeBuild sends to the source provider. The usage of this parameter depends on the source provider.
BitbucketThis parameter is used for the
url
parameter in the Bitbucket commit status. For more information, see build in the Bitbucket API documentation.GitHub/GitHub Enterprise ServerThis parameter is used for the
target_url
parameter in the GitHub commit status. For more information, see Create a commit status in the GitHub developer guide.insecureSsl -> (boolean)
Enable this flag to ignore SSL warnings while connecting to the project source code.sourceIdentifier -> (string)
An identifier for this project source. The identifier can only contain alphanumeric characters and underscores, and must be less than 128 characters in length.secondarySources -> (list)
An array of
ProjectSource
objects that define the sources for the batch build.(structure)
Information about the build input source code for the build project.
type -> (string)
The type of repository that contains the source code to be built. Valid values include:
BITBUCKET
: The source code is in a Bitbucket repository.CODECOMMIT
: The source code is in an CodeCommit repository.CODEPIPELINE
: The source code settings are specified in the source action of a pipeline in CodePipeline.GITHUB
: The source code is in a GitHub repository.GITHUB_ENTERPRISE
: The source code is in a GitHub Enterprise Server repository.GITLAB
: The source code is in a GitLab repository.GITLAB_SELF_MANAGED
: The source code is in a self-managed GitLab repository.NO_SOURCE
: The project does not have input source code.S3
: The source code is in an Amazon S3 bucket.location -> (string)
Information about the location of the source code to be built. Valid values include:
- For source code settings that are specified in the source action of a pipeline in CodePipeline,
location
should not be specified. If it is specified, CodePipeline ignores it. This is because CodePipeline uses the settings in a pipeline's source action instead of this value.- For source code in an CodeCommit repository, the HTTPS clone URL to the repository that contains the source code and the buildspec file (for example,
https://git-codecommit.<region-ID>.amazonaws.com/v1/repos/<repo-name>
).- For source code in an Amazon S3 input bucket, one of the following.
- The path to the ZIP file that contains the source code (for example,
<bucket-name>/<path>/<object-name>.zip
).- The path to the folder that contains the source code (for example,
<bucket-name>/<path-to-source-code>/<folder>/
).- For source code in a GitHub repository, the HTTPS clone URL to the repository that contains the source and the buildspec file. You must connect your Amazon Web Services account to your GitHub account. Use the CodeBuild console to start creating a build project. When you use the console to connect (or reconnect) with GitHub, on the GitHub Authorize application page, for Organization access , choose Request access next to each repository you want to allow CodeBuild to have access to, and then choose Authorize application . (After you have connected to your GitHub account, you do not need to finish creating the build project. You can leave the CodeBuild console.) To instruct CodeBuild to use this connection, in the
source
object, set theauth
object'stype
value toOAUTH
.- For source code in an GitLab or self-managed GitLab repository, the HTTPS clone URL to the repository that contains the source and the buildspec file. You must connect your Amazon Web Services account to your GitLab account. Use the CodeBuild console to start creating a build project. When you use the console to connect (or reconnect) with GitLab, on the Connections Authorize application page, choose Authorize . Then on the CodeConnections Create GitLab connection page, choose Connect to GitLab . (After you have connected to your GitLab account, you do not need to finish creating the build project. You can leave the CodeBuild console.) To instruct CodeBuild to override the default connection and use this connection instead, set the
auth
object'stype
value toCODECONNECTIONS
in thesource
object.- For source code in a Bitbucket repository, the HTTPS clone URL to the repository that contains the source and the buildspec file. You must connect your Amazon Web Services account to your Bitbucket account. Use the CodeBuild console to start creating a build project. When you use the console to connect (or reconnect) with Bitbucket, on the Bitbucket Confirm access to your account page, choose Grant access . (After you have connected to your Bitbucket account, you do not need to finish creating the build project. You can leave the CodeBuild console.) To instruct CodeBuild to use this connection, in the
source
object, set theauth
object'stype
value toOAUTH
.If you specify
CODEPIPELINE
for theType
property, don't specify this property. For all of the other types, you must specifyLocation
.gitCloneDepth -> (integer)
Information about the Git clone depth for the build project.gitSubmodulesConfig -> (structure)
Information about the Git submodules configuration for the build project.
fetchSubmodules -> (boolean)
Set to true to fetch Git submodules for your CodeBuild build project.buildspec -> (string)
The buildspec file declaration to use for the builds in this build project.
If this value is set, it can be either an inline buildspec definition, the path to an alternate buildspec file relative to the value of the built-in
CODEBUILD_SRC_DIR
environment variable, or the path to an S3 bucket. The bucket must be in the same Amazon Web Services Region as the build project. Specify the buildspec file using its ARN (for example,arn:aws:s3:::my-codebuild-sample2/buildspec.yml
). If this value is not provided or is set to an empty string, the source code must contain a buildspec file in its root directory. For more information, see Buildspec File Name and Storage Location .auth -> (structure)
Information about the authorization settings for CodeBuild to access the source code to be built.
type -> (string)
The authorization type to use. Valid options are OAUTH, CODECONNECTIONS, or SECRETS_MANAGER.resource -> (string)
The resource value that applies to the specified authorization type.reportBuildStatus -> (boolean)
Set to true to report the status of a build's start and finish to your source provider. This option is valid only when your source provider is GitHub, GitHub Enterprise, GitLab, GitLab Self Managed, or Bitbucket. If this is set and you use a different source provider, an
invalidInputException
is thrown.To be able to report the build status to the source provider, the user associated with the source provider must have write access to the repo. If the user does not have write access, the build status cannot be updated. For more information, see Source provider access in the CodeBuild User Guide .
The status of a build triggered by a webhook is always reported to your source provider.
If your project's builds are triggered by a webhook, you must push a new commit to the repo for a change to this property to take effect.
buildStatusConfig -> (structure)
Contains information that defines how the build project reports the build status to the source provider. This option is only used when the source provider is
GITHUB
,GITHUB_ENTERPRISE
, orBITBUCKET
.context -> (string)
Specifies the context of the build status CodeBuild sends to the source provider. The usage of this parameter depends on the source provider.
BitbucketThis parameter is used for the
name
parameter in the Bitbucket commit status. For more information, see build in the Bitbucket API documentation.GitHub/GitHub Enterprise ServerThis parameter is used for the
context
parameter in the GitHub commit status. For more information, see Create a commit status in the GitHub developer guide.targetUrl -> (string)
Specifies the target url of the build status CodeBuild sends to the source provider. The usage of this parameter depends on the source provider.
BitbucketThis parameter is used for the
url
parameter in the Bitbucket commit status. For more information, see build in the Bitbucket API documentation.GitHub/GitHub Enterprise ServerThis parameter is used for the
target_url
parameter in the GitHub commit status. For more information, see Create a commit status in the GitHub developer guide.insecureSsl -> (boolean)
Enable this flag to ignore SSL warnings while connecting to the project source code.sourceIdentifier -> (string)
An identifier for this project source. The identifier can only contain alphanumeric characters and underscores, and must be less than 128 characters in length.secondarySourceVersions -> (list)
An array of
ProjectSourceVersion
objects. EachProjectSourceVersion
must be one of:
- For CodeCommit: the commit ID, branch, or Git tag to use.
- For GitHub: the commit ID, pull request ID, branch name, or tag name that corresponds to the version of the source code you want to build. If a pull request ID is specified, it must use the format
pr/pull-request-ID
(for example,pr/25
). If a branch name is specified, the branch's HEAD commit ID is used. If not specified, the default branch's HEAD commit ID is used.- For Bitbucket: the commit ID, branch name, or tag name that corresponds to the version of the source code you want to build. If a branch name is specified, the branch's HEAD commit ID is used. If not specified, the default branch's HEAD commit ID is used.
- For Amazon S3: the version ID of the object that represents the build input ZIP file to use.
(structure)
A source identifier and its corresponding version.
sourceIdentifier -> (string)
An identifier for a source in the build project. The identifier can only contain alphanumeric characters and underscores, and must be less than 128 characters in length.sourceVersion -> (string)
The source version for the corresponding source identifier. If specified, must be one of:
- For CodeCommit: the commit ID, branch, or Git tag to use.
- For GitHub: the commit ID, pull request ID, branch name, or tag name that corresponds to the version of the source code you want to build. If a pull request ID is specified, it must use the format
pr/pull-request-ID
(for example,pr/25
). If a branch name is specified, the branch's HEAD commit ID is used. If not specified, the default branch's HEAD commit ID is used.- For GitLab: the commit ID, branch, or Git tag to use.
- For Bitbucket: the commit ID, branch name, or tag name that corresponds to the version of the source code you want to build. If a branch name is specified, the branch's HEAD commit ID is used. If not specified, the default branch's HEAD commit ID is used.
- For Amazon S3: the version ID of the object that represents the build input ZIP file to use.
For more information, see Source Version Sample with CodeBuild in the CodeBuild User Guide .
artifacts -> (structure)
A
BuildArtifacts
object the defines the build artifacts for this batch build.location -> (string)
Information about the location of the build artifacts.sha256sum -> (string)
The SHA-256 hash of the build artifact.
You can use this hash along with a checksum tool to confirm file integrity and authenticity.
Note
This value is available only if the build project'spackaging
value is set toZIP
.md5sum -> (string)
The MD5 hash of the build artifact.
You can use this hash along with a checksum tool to confirm file integrity and authenticity.
Note
This value is available only if the build project'spackaging
value is set toZIP
.overrideArtifactName -> (boolean)
If this flag is set, a name specified in the buildspec file overrides the artifact name. The name specified in a buildspec file is calculated at build time and uses the Shell Command Language. For example, you can append a date and time to your artifact name so that it is always unique.encryptionDisabled -> (boolean)
Information that tells you if encryption for build artifacts is disabled.artifactIdentifier -> (string)
An identifier for this artifact definition.bucketOwnerAccess -> (string)
Specifies the bucket owner's access for objects that another account uploads to their Amazon S3 bucket. By default, only the account that uploads the objects to the bucket has access to these objects. This property allows you to give the bucket owner access to these objects.
Note
To use this property, your CodeBuild service role must have thes3:PutBucketAcl
permission. This permission allows CodeBuild to modify the access control list for the bucket.This property can be one of the following values:
NONEThe bucket owner does not have access to the objects. This is the default.
READ_ONLYThe bucket owner has read-only access to the objects. The uploading account retains ownership of the objects.
FULLThe bucket owner has full access to the objects. Object ownership is determined by the following criteria:
- If the bucket is configured with the Bucket owner preferred setting, the bucket owner owns the objects. The uploading account will have object access as specified by the bucket's policy.
- Otherwise, the uploading account retains ownership of the objects.
For more information about Amazon S3 object ownership, see Controlling ownership of uploaded objects using S3 Object Ownership in the Amazon Simple Storage Service User Guide .
secondaryArtifacts -> (list)
An array of
BuildArtifacts
objects the define the build artifacts for this batch build.(structure)
Information about build output artifacts.
location -> (string)
Information about the location of the build artifacts.sha256sum -> (string)
The SHA-256 hash of the build artifact.
You can use this hash along with a checksum tool to confirm file integrity and authenticity.
Note
This value is available only if the build project'spackaging
value is set toZIP
.md5sum -> (string)
The MD5 hash of the build artifact.
You can use this hash along with a checksum tool to confirm file integrity and authenticity.
Note
This value is available only if the build project'spackaging
value is set toZIP
.overrideArtifactName -> (boolean)
If this flag is set, a name specified in the buildspec file overrides the artifact name. The name specified in a buildspec file is calculated at build time and uses the Shell Command Language. For example, you can append a date and time to your artifact name so that it is always unique.encryptionDisabled -> (boolean)
Information that tells you if encryption for build artifacts is disabled.artifactIdentifier -> (string)
An identifier for this artifact definition.bucketOwnerAccess -> (string)
Specifies the bucket owner's access for objects that another account uploads to their Amazon S3 bucket. By default, only the account that uploads the objects to the bucket has access to these objects. This property allows you to give the bucket owner access to these objects.
Note
To use this property, your CodeBuild service role must have thes3:PutBucketAcl
permission. This permission allows CodeBuild to modify the access control list for the bucket.This property can be one of the following values:
NONEThe bucket owner does not have access to the objects. This is the default.
READ_ONLYThe bucket owner has read-only access to the objects. The uploading account retains ownership of the objects.
FULLThe bucket owner has full access to the objects. Object ownership is determined by the following criteria:
- If the bucket is configured with the Bucket owner preferred setting, the bucket owner owns the objects. The uploading account will have object access as specified by the bucket's policy.
- Otherwise, the uploading account retains ownership of the objects.
For more information about Amazon S3 object ownership, see Controlling ownership of uploaded objects using S3 Object Ownership in the Amazon Simple Storage Service User Guide .
cache -> (structure)
Information about the cache for the build project.
type -> (string)
The type of cache used by the build project. Valid values include:
NO_CACHE
: The build project does not use any cache.S3
: The build project reads and writes from and to S3.LOCAL
: The build project stores a cache locally on a build host that is only available to that build host.location -> (string)
Information about the cache location:
NO_CACHE
orLOCAL
: This value is ignored.S3
: This is the S3 bucket name/prefix.modes -> (list)
An array of strings that specify the local cache modes. You can use one or more local cache modes at the same time. This is only used for
LOCAL
cache types.Possible values are:
LOCAL_SOURCE_CACHECaches Git metadata for primary and secondary sources. After the cache is created, subsequent builds pull only the change between commits. This mode is a good choice for projects with a clean working directory and a source that is a large Git repository. If you choose this option and your project does not use a Git repository (GitHub, GitHub Enterprise, or Bitbucket), the option is ignored.
LOCAL_DOCKER_LAYER_CACHECaches existing Docker layers. This mode is a good choice for projects that build or pull large Docker images. It can prevent the performance issues caused by pulling large Docker images down from the network.
Note
- You can use a Docker layer cache in the Linux environment only.
- The
privileged
flag must be set so that your project has the required Docker permissions.- You should consider the security implications before you use a Docker layer cache.
LOCAL_CUSTOM_CACHE
Caches directories you specify in the buildspec file. This mode is a good choice if your build scenario is not suited to one of the other three local cache modes. If you use a custom cache:
- Only directories can be specified for caching. You cannot specify individual files.
- Symlinks are used to reference cached directories.
- Cached directories are linked to your build before it downloads its project sources. Cached items are overridden if a source item has the same name. Directories are specified using cache paths in the buildspec file.
(string)
environment -> (structure)
Information about the build environment of the build project.
type -> (string)
The type of build environment to use for related builds.
- The environment type
ARM_CONTAINER
is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Sydney), and EU (Frankfurt).- The environment type
LINUX_CONTAINER
is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), Canada (Central), EU (Ireland), EU (London), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), China (Beijing), and China (Ningxia).- The environment type
LINUX_GPU_CONTAINER
is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), Canada (Central), EU (Ireland), EU (London), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney) , China (Beijing), and China (Ningxia).- The environment types
ARM_LAMBDA_CONTAINER
andLINUX_LAMBDA_CONTAINER
are available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Mumbai), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), EU (Frankfurt), EU (Ireland), and South America (São Paulo).- The environment types
WINDOWS_CONTAINER
andWINDOWS_SERVER_2019_CONTAINER
are available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), and EU (Ireland).Note
If you're using compute fleets during project creation,type
will be ignored.For more information, see Build environment compute types in the CodeBuild user guide .
image -> (string)
The image tag or image digest that identifies the Docker image to use for this build project. Use the following formats:
- For an image tag:
<registry>/<repository>:<tag>
. For example, in the Docker repository that CodeBuild uses to manage its Docker images, this would beaws/codebuild/standard:4.0
.- For an image digest:
<registry>/<repository>@<digest>
. For example, to specify an image with the digest "sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf," use<registry>/<repository>@sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf
.For more information, see Docker images provided by CodeBuild in the CodeBuild user guide .
computeType -> (string)
Information about the compute resources the build project uses. Available values include:
ATTRIBUTE_BASED_COMPUTE
: Specify the amount of vCPUs, memory, disk space, and the type of machine.Note
If you useATTRIBUTE_BASED_COMPUTE
, you must define your attributes by usingcomputeConfiguration
. CodeBuild will select the cheapest instance that satisfies your specified attributes. For more information, see Reserved capacity environment types in the CodeBuild User Guide .
BUILD_GENERAL1_SMALL
: Use up to 4 GiB memory and 2 vCPUs for builds.BUILD_GENERAL1_MEDIUM
: Use up to 8 GiB memory and 4 vCPUs for builds.BUILD_GENERAL1_LARGE
: Use up to 16 GiB memory and 8 vCPUs for builds, depending on your environment type.BUILD_GENERAL1_XLARGE
: Use up to 72 GiB memory and 36 vCPUs for builds, depending on your environment type.BUILD_GENERAL1_2XLARGE
: Use up to 144 GiB memory, 72 vCPUs, and 824 GB of SSD storage for builds. This compute type supports Docker images up to 100 GB uncompressed.BUILD_LAMBDA_1GB
: Use up to 1 GiB memory for builds. Only available for environment typeLINUX_LAMBDA_CONTAINER
andARM_LAMBDA_CONTAINER
.BUILD_LAMBDA_2GB
: Use up to 2 GiB memory for builds. Only available for environment typeLINUX_LAMBDA_CONTAINER
andARM_LAMBDA_CONTAINER
.BUILD_LAMBDA_4GB
: Use up to 4 GiB memory for builds. Only available for environment typeLINUX_LAMBDA_CONTAINER
andARM_LAMBDA_CONTAINER
.BUILD_LAMBDA_8GB
: Use up to 8 GiB memory for builds. Only available for environment typeLINUX_LAMBDA_CONTAINER
andARM_LAMBDA_CONTAINER
.BUILD_LAMBDA_10GB
: Use up to 10 GiB memory for builds. Only available for environment typeLINUX_LAMBDA_CONTAINER
andARM_LAMBDA_CONTAINER
.If you use
BUILD_GENERAL1_SMALL
:
- For environment type
LINUX_CONTAINER
, you can use up to 4 GiB memory and 2 vCPUs for builds.- For environment type
LINUX_GPU_CONTAINER
, you can use up to 16 GiB memory, 4 vCPUs, and 1 NVIDIA A10G Tensor Core GPU for builds.- For environment type
ARM_CONTAINER
, you can use up to 4 GiB memory and 2 vCPUs on ARM-based processors for builds.If you use
BUILD_GENERAL1_LARGE
:
- For environment type
LINUX_CONTAINER
, you can use up to 16 GiB memory and 8 vCPUs for builds.- For environment type
LINUX_GPU_CONTAINER
, you can use up to 255 GiB memory, 32 vCPUs, and 4 NVIDIA Tesla V100 GPUs for builds.- For environment type
ARM_CONTAINER
, you can use up to 16 GiB memory and 8 vCPUs on ARM-based processors for builds.For more information, see On-demand environment types in the CodeBuild User Guide.
computeConfiguration -> (structure)
The compute configuration of the build project. This is only required if
computeType
is set toATTRIBUTE_BASED_COMPUTE
.vCpu -> (long)
The number of vCPUs of the instance type included in your fleet.memory -> (long)
The amount of memory of the instance type included in your fleet.disk -> (long)
The amount of disk space of the instance type included in your fleet.machineType -> (string)
The machine type of the instance type included in your fleet.fleet -> (structure)
A ProjectFleet object to use for this build project.
fleetArn -> (string)
Specifies the compute fleet ARN for the build project.environmentVariables -> (list)
A set of environment variables to make available to builds for this build project.
(structure)
Information about an environment variable for a build project or a build.
name -> (string)
The name or key of the environment variable.value -> (string)
The value of the environment variable.
Warning
We strongly discourage the use ofPLAINTEXT
environment variables to store sensitive values, especially Amazon Web Services secret key IDs.PLAINTEXT
environment variables can be displayed in plain text using the CodeBuild console and the CLI. For sensitive values, we recommend you use an environment variable of typePARAMETER_STORE
orSECRETS_MANAGER
.type -> (string)
The type of environment variable. Valid values include:
PARAMETER_STORE
: An environment variable stored in Systems Manager Parameter Store. For environment variables of this type, specify the name of the parameter as thevalue
of the EnvironmentVariable. The parameter value will be substituted for the name at runtime. You can also define Parameter Store environment variables in the buildspec. To learn how to do so, see env/parameter-store in the CodeBuild User Guide .PLAINTEXT
: An environment variable in plain text format. This is the default value.SECRETS_MANAGER
: An environment variable stored in Secrets Manager. For environment variables of this type, specify the name of the secret as thevalue
of the EnvironmentVariable. The secret value will be substituted for the name at runtime. You can also define Secrets Manager environment variables in the buildspec. To learn how to do so, see env/secrets-manager in the CodeBuild User Guide .privilegedMode -> (boolean)
Enables running the Docker daemon inside a Docker container. Set to true only if the build project is used to build Docker images. Otherwise, a build that attempts to interact with the Docker daemon fails. The default setting is
false
.You can initialize the Docker daemon during the install phase of your build by adding one of the following sets of commands to the install phase of your buildspec file:
If the operating system's base image is Ubuntu Linux:
- nohup /usr/local/bin/dockerd --host=unix:///var/run/docker.sock --host=tcp://0.0.0.0:2375 --storage-driver=overlay&
- timeout 15 sh -c "until docker info; do echo .; sleep 1; done"
If the operating system's base image is Alpine Linux and the previous command does not work, add the
-t
argument totimeout
:
- nohup /usr/local/bin/dockerd --host=unix:///var/run/docker.sock --host=tcp://0.0.0.0:2375 --storage-driver=overlay&
- timeout -t 15 sh -c "until docker info; do echo .; sleep 1; done"
certificate -> (string)
The ARN of the Amazon S3 bucket, path prefix, and object key that contains the PEM-encoded certificate for the build project. For more information, see certificate in the CodeBuild User Guide .registryCredential -> (structure)
The credentials for access to a private registry.
credential -> (string)
The Amazon Resource Name (ARN) or name of credentials created using Secrets Manager.
Note
Thecredential
can use the name of the credentials only if they exist in your current Amazon Web Services Region.credentialProvider -> (string)
The service that created the credentials to access a private Docker registry. The valid value, SECRETS_MANAGER, is for Secrets Manager.imagePullCredentialsType -> (string)
The type of credentials CodeBuild uses to pull images in your build. There are two valid values:
CODEBUILD
specifies that CodeBuild uses its own credentials. This requires that you modify your ECR repository policy to trust CodeBuild service principal.SERVICE_ROLE
specifies that CodeBuild uses your build project's service role.When you use a cross-account or private registry image, you must use SERVICE_ROLE credentials. When you use an CodeBuild curated image, you must use CODEBUILD credentials.
serviceRole -> (string)
The name of a service role used for builds in the batch.logConfig -> (structure)
Information about logs for a build project. These can be logs in CloudWatch Logs, built in a specified S3 bucket, or both.
cloudWatchLogs -> (structure)
Information about CloudWatch Logs for a build project. CloudWatch Logs are enabled by default.
status -> (string)
The current status of the logs in CloudWatch Logs for a build project. Valid values are:
ENABLED
: CloudWatch Logs are enabled for this build project.DISABLED
: CloudWatch Logs are not enabled for this build project.groupName -> (string)
The group name of the logs in CloudWatch Logs. For more information, see Working with Log Groups and Log Streams .streamName -> (string)
The prefix of the stream name of the CloudWatch Logs. For more information, see Working with Log Groups and Log Streams .s3Logs -> (structure)
Information about logs built to an S3 bucket for a build project. S3 logs are not enabled by default.
status -> (string)
The current status of the S3 build logs. Valid values are:
ENABLED
: S3 build logs are enabled for this build project.DISABLED
: S3 build logs are not enabled for this build project.location -> (string)
The ARN of an S3 bucket and the path prefix for S3 logs. If your Amazon S3 bucket name ismy-bucket
, and your path prefix isbuild-log
, then acceptable formats aremy-bucket/build-log
orarn:aws:s3:::my-bucket/build-log
.encryptionDisabled -> (boolean)
Set to true if you do not want your S3 build log output encrypted. By default S3 build logs are encrypted.bucketOwnerAccess -> (string)
Specifies the bucket owner's access for objects that another account uploads to their Amazon S3 bucket. By default, only the account that uploads the objects to the bucket has access to these objects. This property allows you to give the bucket owner access to these objects.
Note
To use this property, your CodeBuild service role must have thes3:PutBucketAcl
permission. This permission allows CodeBuild to modify the access control list for the bucket.This property can be one of the following values:
NONEThe bucket owner does not have access to the objects. This is the default.
READ_ONLYThe bucket owner has read-only access to the objects. The uploading account retains ownership of the objects.
FULLThe bucket owner has full access to the objects. Object ownership is determined by the following criteria:
- If the bucket is configured with the Bucket owner preferred setting, the bucket owner owns the objects. The uploading account will have object access as specified by the bucket's policy.
- Otherwise, the uploading account retains ownership of the objects.
For more information about Amazon S3 object ownership, see Controlling ownership of uploaded objects using S3 Object Ownership in the Amazon Simple Storage Service User Guide .
buildTimeoutInMinutes -> (integer)
Specifies the maximum amount of time, in minutes, that the build in a batch must be completed in.queuedTimeoutInMinutes -> (integer)
Specifies the amount of time, in minutes, that the batch build is allowed to be queued before it times out.complete -> (boolean)
Indicates if the batch build is complete.initiator -> (string)
The entity that started the batch build. Valid values include:
- If CodePipeline started the build, the pipeline's name (for example,
codepipeline/my-demo-pipeline
).- If a user started the build, the user's name.
- If the Jenkins plugin for CodeBuild started the build, the string
CodeBuild-Jenkins-Plugin
.vpcConfig -> (structure)
Information about the VPC configuration that CodeBuild accesses.
vpcId -> (string)
The ID of the Amazon VPC.subnets -> (list)
A list of one or more subnet IDs in your Amazon VPC.
(string)
securityGroupIds -> (list)
A list of one or more security groups IDs in your Amazon VPC.
(string)
encryptionKey -> (string)
The Key Management Service customer master key (CMK) to be used for encrypting the batch build output artifacts.
Note
You can use a cross-account KMS key to encrypt the build output artifacts if your service role has permission to that key.You can specify either the Amazon Resource Name (ARN) of the CMK or, if available, the CMK's alias (using the format
alias/<alias-name>
).buildBatchNumber -> (long)
The number of the batch build. For each project, thebuildBatchNumber
of its first batch build is1
. ThebuildBatchNumber
of each subsequent batch build is incremented by1
. If a batch build is deleted, thebuildBatchNumber
of other batch builds does not change.fileSystemLocations -> (list)
An array of
ProjectFileSystemLocation
objects for the batch build project. AProjectFileSystemLocation
object specifies theidentifier
,location
,mountOptions
,mountPoint
, andtype
of a file system created using Amazon Elastic File System.(structure)
Information about a file system created by Amazon Elastic File System (EFS). For more information, see What Is Amazon Elastic File System?
type -> (string)
The type of the file system. The one supported type isEFS
.location -> (string)
A string that specifies the location of the file system created by Amazon EFS. Its format is
efs-dns-name:/directory-path
. You can find the DNS name of file system when you view it in the Amazon EFS console. The directory path is a path to a directory in the file system that CodeBuild mounts. For example, if the DNS name of a file system isfs-abcd1234.efs.us-west-2.amazonaws.com
, and its mount directory ismy-efs-mount-directory
, then thelocation
isfs-abcd1234.efs.us-west-2.amazonaws.com:/my-efs-mount-directory
.The directory path in the format
efs-dns-name:/directory-path
is optional. If you do not specify a directory path, the location is only the DNS name and CodeBuild mounts the entire file system.mountPoint -> (string)
The location in the container where you mount the file system.identifier -> (string)
The name used to access a file system created by Amazon EFS. CodeBuild creates an environment variable by appending the
identifier
in all capital letters toCODEBUILD_
. For example, if you specifymy_efs
foridentifier
, a new environment variable is create namedCODEBUILD_MY_EFS
.The
identifier
is used to mount your file system.mountOptions -> (string)
The mount options for a file system created by Amazon EFS. The default mount options used by CodeBuild arenfsvers=4.1,rsize=1048576,wsize=1048576,hard,timeo=600,retrans=2
. For more information, see Recommended NFS Mount Options .buildBatchConfig -> (structure)
Contains configuration information about a batch build project.
serviceRole -> (string)
Specifies the service role ARN for the batch build project.combineArtifacts -> (boolean)
Specifies if the build artifacts for the batch build should be combined into a single artifact location.restrictions -> (structure)
A
BatchRestrictions
object that specifies the restrictions for the batch build.maximumBuildsAllowed -> (integer)
Specifies the maximum number of builds allowed.computeTypesAllowed -> (list)
An array of strings that specify the compute types that are allowed for the batch build. See Build environment compute types in the CodeBuild User Guide for these values.
(string)
timeoutInMins -> (integer)
Specifies the maximum amount of time, in minutes, that the batch build must be completed in.batchReportMode -> (string)
Specifies how build status reports are sent to the source provider for the batch build. This property is only used when the source provider for your project is Bitbucket, GitHub, or GitHub Enterprise, and your project is configured to report build statuses to the source provider.
REPORT_AGGREGATED_BATCH(Default) Aggregate all of the build statuses into a single status report.
REPORT_INDIVIDUAL_BUILDSSend a separate status report for each individual build.
buildGroups -> (list)
An array of
BuildGroup
objects that define the build groups for the batch build.(structure)
Contains information about a batch build build group. Build groups are used to combine builds that can run in parallel, while still being able to set dependencies on other build groups.
identifier -> (string)
Contains the identifier of the build group.dependsOn -> (list)
An array of strings that contain the identifiers of the build groups that this build group depends on.
(string)
ignoreFailure -> (boolean)
Specifies if failures in this build group can be ignored.currentBuildSummary -> (structure)
A
BuildSummary
object that contains a summary of the current build group.arn -> (string)
The batch build ARN.requestedOn -> (timestamp)
When the build was started, expressed in Unix time format.buildStatus -> (string)
The status of the build group.
FAILEDThe build group failed.
FAULTThe build group faulted.
IN_PROGRESSThe build group is still in progress.
STOPPEDThe build group stopped.
SUCCEEDEDThe build group succeeded.
TIMED_OUTThe build group timed out.
primaryArtifact -> (structure)
A
ResolvedArtifact
object that represents the primary build artifacts for the build group.type -> (string)
Specifies the type of artifact.location -> (string)
The location of the artifact.identifier -> (string)
The identifier of the artifact.secondaryArtifacts -> (list)
An array of
ResolvedArtifact
objects that represents the secondary build artifacts for the build group.(structure)
Represents a resolved build artifact. A resolved artifact is an artifact that is built and deployed to the destination, such as Amazon S3.
type -> (string)
Specifies the type of artifact.location -> (string)
The location of the artifact.identifier -> (string)
The identifier of the artifact.priorBuildSummaryList -> (list)
An array of
BuildSummary
objects that contain summaries of previous build groups.(structure)
Contains summary information about a batch build group.
arn -> (string)
The batch build ARN.requestedOn -> (timestamp)
When the build was started, expressed in Unix time format.buildStatus -> (string)
The status of the build group.
FAILEDThe build group failed.
FAULTThe build group faulted.
IN_PROGRESSThe build group is still in progress.
STOPPEDThe build group stopped.
SUCCEEDEDThe build group succeeded.
TIMED_OUTThe build group timed out.
primaryArtifact -> (structure)
A
ResolvedArtifact
object that represents the primary build artifacts for the build group.type -> (string)
Specifies the type of artifact.location -> (string)
The location of the artifact.identifier -> (string)
The identifier of the artifact.secondaryArtifacts -> (list)
An array of
ResolvedArtifact
objects that represents the secondary build artifacts for the build group.(structure)
Represents a resolved build artifact. A resolved artifact is an artifact that is built and deployed to the destination, such as Amazon S3.
type -> (string)
Specifies the type of artifact.location -> (string)
The location of the artifact.identifier -> (string)
The identifier of the artifact.debugSessionEnabled -> (boolean)
Specifies if session debugging is enabled for this batch build. For more information, see Viewing a running build in Session Manager . Batch session debugging is not supported for matrix batch builds.