AWS GovCloud (US) User Guide
AWS GovCloud (US) User Guide

AWS CodeCommit

AWS CodeCommit is a fully-managed source control service that hosts secure Git-based repositories. It makes it easy for teams to collaborate on code in a secure and highly scalable ecosystem. CodeCommit eliminates the need to operate your own source control system or worry about scaling its infrastructure. You can use CodeCommit to securely store anything from source code to binaries, and it works seamlessly with your existing Git tools.

This service is currently available in AWS GovCloud (US-West) only.

The following list details the differences for using this service in the AWS GovCloud (US-West) Region compared to other AWS Regions:

  • The old console experience is not available in the AWS GovCloud (US-West) Region. The documentation reflects the new console experience.

  • Amazon VPC endpoint support is not available for CodeCommit in the AWS GovCloud (US-West) Region.

  • Since AWS GovCloud (US-West) operates as a single isolated region, you cannot share or use CodeCommit repositories and resources with other services outside of the region. For example, you cannot use a CodeCommit repository in AWS GovCloud (US-West) as the source for a pipeline in CodePipeline that is not in the AWS GovCloud (US-West) Region.

  • All policy statements must refer to the ARN for the AWS GovCloud (US-West) Region. For example, policies for Amazon SNS notifications, CloudWatch Events rules, and trigger resources must use the AWS GovCloud (US-West) ARNs for those services. For more information, see Amazon Resource Names (ARNs) in AWS GovCloud (US-West).

  • All IAM users and service roles must exist in the AWS GovCloud (US-West) Region.

CodeCommit Resources for AWS GovCloud (US-West)

For more information about AWS CodeCommit, see the AWS CodeCommit documentation.

ITAR Boundary

AWS GovCloud (US) has an ITAR boundary, which defines where customers are allowed to store ITAR-controlled data for this service in the AWS GovCloud (US-West) Region. To maintain ITAR compliance, you must place ITAR-controlled data on the applicable part of the ITAR boundary. If you do not have any ITAR-controlled data in the AWS GovCloud (US-West) Region, this section does not apply to you. The following information identifies the ITAR boundary for this service:

ITAR-Regulated Data Permitted ITAR-Regulated Data Not Permitted

All deployments managed in CodeCommit support ITAR-regulated data.

The following CodeCommit metadata fields are not permitted to contain ITAR-regulated data:

  • Repository name

  • Repository description

  • Branch name

  • Trigger name

  • SNS topic name

  • AWS Lambda topic name