This page documents the language specification for the aws package. If you're looking for help working with the inputs, outputs, or functions of aws resources in a Pulumi program, please see the resource documentation for examples and API reference.

codebuild¶

This provider is a derived work of the Terraform Provider distributed under MPL 2.0. If you encounter a bug or missing feature, first check the pulumi/pulumi-aws repo; however, if that doesn’t turn up anything, please consult the source terraform-providers/terraform-provider-aws repo.

class pulumi_aws.codebuild.Project(resource_name, opts=None, artifacts=None, badge_enabled=None, build_timeout=None, cache=None, description=None, encryption_key=None, environment=None, logs_config=None, name=None, queued_timeout=None, secondary_artifacts=None, secondary_sources=None, service_role=None, source=None, source_version=None, tags=None, vpc_config=None, __props__=None, __name__=None, __opts__=None)¶

Provides a CodeBuild Project resource. See also the codebuild.Webhook resource, which manages the webhook to the source (e.g. the “rebuild every time a code change is pushed” option in the CodeBuild web console).

import pulumi
import pulumi_aws as aws

example_bucket = aws.s3.Bucket("exampleBucket", acl="private")
example_role = aws.iam.Role("exampleRole", assume_role_policy="""{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "codebuild.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

""")
example_role_policy = aws.iam.RolePolicy("exampleRolePolicy",
    policy=pulumi.Output.all(example_bucket.arn, example_bucket.arn).apply(lambda exampleBucketArn, exampleBucketArn1: f"""{{
  "Version": "2012-10-17",
  "Statement": [
    {{
      "Effect": "Allow",
      "Resource": [
        "*"
      ],
      "Action": [
        "logs:CreateLogGroup",
        "logs:CreateLogStream",
        "logs:PutLogEvents"
      ]
    }},
    {{
      "Effect": "Allow",
      "Action": [
        "ec2:CreateNetworkInterface",
        "ec2:DescribeDhcpOptions",
        "ec2:DescribeNetworkInterfaces",
        "ec2:DeleteNetworkInterface",
        "ec2:DescribeSubnets",
        "ec2:DescribeSecurityGroups",
        "ec2:DescribeVpcs"
      ],
      "Resource": "*"
    }},
    {{
      "Effect": "Allow",
      "Action": [
        "ec2:CreateNetworkInterfacePermission"
      ],
      "Resource": [
        "arn:aws:ec2:us-east-1:123456789012:network-interface/*"
      ],
      "Condition": {{
        "StringEquals": {{
          "ec2:Subnet": [
            "{aws_subnet["example1"]["arn"]}",
            "{aws_subnet["example2"]["arn"]}"
          ],
          "ec2:AuthorizedService": "codebuild.amazonaws.com"
        }}
      }}
    }},
    {{
      "Effect": "Allow",
      "Action": [
        "s3:*"
      ],
      "Resource": [
        "{example_bucket_arn}",
        "{example_bucket_arn1}/*"
      ]
    }}
  ]
}}

"""),
    role=example_role.name)
example_project = aws.codebuild.Project("exampleProject",
    artifacts={
        "type": "NO_ARTIFACTS",
    },
    build_timeout="5",
    cache={
        "location": example_bucket.bucket,
        "type": "S3",
    },
    description="test_codebuild_project",
    environment={
        "computeType": "BUILD_GENERAL1_SMALL",
        "environmentVariable": [
            {
                "name": "SOME_KEY1",
                "value": "SOME_VALUE1",
            },
            {
                "name": "SOME_KEY2",
                "type": "PARAMETER_STORE",
                "value": "SOME_VALUE2",
            },
        ],
        "image": "aws/codebuild/standard:1.0",
        "imagePullCredentialsType": "CODEBUILD",
        "type": "LINUX_CONTAINER",
    },
    logs_config={
        "cloudwatchLogs": {
            "group_name": "log-group",
            "streamName": "log-stream",
        },
        "s3Logs": {
            "location": example_bucket.id.apply(lambda id: f"{id}/build-log"),
            "status": "ENABLED",
        },
    },
    service_role=example_role.arn,
    source={
        "gitCloneDepth": 1,
        "gitSubmodulesConfig": {
            "fetchSubmodules": True,
        },
        "location": "https://github.com/mitchellh/packer.git",
        "type": "GITHUB",
    },
    source_version="master",
    tags={
        "Environment": "Test",
    },
    vpc_config={
        "security_group_ids": [
            aws_security_group["example1"]["id"],
            aws_security_group["example2"]["id"],
        ],
        "subnets": [
            aws_subnet["example1"]["id"],
            aws_subnet["example2"]["id"],
        ],
        "vpc_id": aws_vpc["example"]["id"],
    })
project_with_cache = aws.codebuild.Project("project-with-cache",
    artifacts={
        "type": "NO_ARTIFACTS",
    },
    build_timeout="5",
    cache={
        "modes": [
            "LOCAL_DOCKER_LAYER_CACHE",
            "LOCAL_SOURCE_CACHE",
        ],
        "type": "LOCAL",
    },
    description="test_codebuild_project_cache",
    environment={
        "computeType": "BUILD_GENERAL1_SMALL",
        "environmentVariable": [{
            "name": "SOME_KEY1",
            "value": "SOME_VALUE1",
        }],
        "image": "aws/codebuild/standard:1.0",
        "imagePullCredentialsType": "CODEBUILD",
        "type": "LINUX_CONTAINER",
    },
    queued_timeout="5",
    service_role=example_role.arn,
    source={
        "gitCloneDepth": 1,
        "location": "https://github.com/mitchellh/packer.git",
        "type": "GITHUB",
    },
    tags={
        "Environment": "Test",
    })

Parameters

resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
artifacts (pulumi.Input[dict]) – Information about the project’s build output artifacts. Artifact blocks are documented below.
badge_enabled (pulumi.Input[bool]) – Generates a publicly-accessible URL for the projects build badge. Available as badge_url attribute when enabled.
build_timeout (pulumi.Input[float]) – How long in minutes, from 5 to 480 (8 hours), for AWS CodeBuild to wait until timing out any related build that does not get marked as completed. The default is 60 minutes.
cache (pulumi.Input[dict]) – Information about the cache storage for the project. Cache blocks are documented below.
description (pulumi.Input[str]) – A short description of the project.
encryption_key (pulumi.Input[str]) – The AWS Key Management Service (AWS KMS) customer master key (CMK) to be used for encrypting the build project’s build output artifacts.
environment (pulumi.Input[dict]) – Information about the project’s build environment. Environment blocks are documented below.
logs_config (pulumi.Input[dict]) – Configuration for the builds to store log data to CloudWatch or S3.
name (pulumi.Input[str]) – The projects name.
queued_timeout (pulumi.Input[float]) – How long in minutes, from 5 to 480 (8 hours), a build is allowed to be queued before it times out. The default is 8 hours.
secondary_artifacts (pulumi.Input[list]) – A set of secondary artifacts to be used inside the build. Secondary artifacts blocks are documented below.
secondary_sources (pulumi.Input[list]) – A set of secondary sources to be used inside the build. Secondary sources blocks are documented below.
service_role (pulumi.Input[str]) – The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that enables AWS CodeBuild to interact with dependent AWS services on behalf of the AWS account.
source (pulumi.Input[dict]) – Information about the project’s input source code. Source blocks are documented below.
source_version (pulumi.Input[str]) – A version of the build input to be built for this project. If not specified, the latest version is used.
tags (pulumi.Input[dict]) – A map of tags to assign to the resource.
vpc_config (pulumi.Input[dict]) – Configuration for the builds to run inside a VPC. VPC config blocks are documented below.

The artifacts object supports the following:

artifactIdentifier (pulumi.Input[str]) - The artifact identifier. Must be the same specified inside AWS CodeBuild buildspec.
encryptionDisabled (pulumi.Input[bool]) - If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
location (pulumi.Input[str]) - Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket.
name (pulumi.Input[str]) - The name of the project. If type is set to S3, this is the name of the output artifact object
namespaceType (pulumi.Input[str]) - The namespace to use in storing build artifacts. If type is set to S3, then valid values for this parameter are: BUILD_ID or NONE.
overrideArtifactName (pulumi.Input[bool]) - If set to true, a name specified in the build spec file overrides the artifact name.
packaging (pulumi.Input[str]) - The type of build output artifact to create. If type is set to S3, valid values for this parameter are: NONE or ZIP
path (pulumi.Input[str]) - If type is set to S3, this is the path to the output artifact
type (pulumi.Input[str]) - The build output artifact’s type. Valid values for this parameter are: CODEPIPELINE, NO_ARTIFACTS or S3.

The cache object supports the following:

location (pulumi.Input[str]) - The location where the AWS CodeBuild project stores cached resources. For type S3 the value must be a valid S3 bucket name/prefix.
modes (pulumi.Input[list]) - Specifies settings that AWS CodeBuild uses to store and reuse build dependencies. Valid values: LOCAL_SOURCE_CACHE, LOCAL_DOCKER_LAYER_CACHE, and LOCAL_CUSTOM_CACHE
type (pulumi.Input[str]) - The type of storage that will be used for the AWS CodeBuild project cache. Valid values: NO_CACHE, LOCAL, and S3. Defaults to NO_CACHE.

The environment object supports the following:

certificate (pulumi.Input[str]) - The ARN of the S3 bucket, path prefix and object key that contains the PEM-encoded certificate.
computeType (pulumi.Input[str]) - Information about the compute resources the build project will use. Available values for this parameter are: BUILD_GENERAL1_SMALL, BUILD_GENERAL1_MEDIUM, BUILD_GENERAL1_LARGE or BUILD_GENERAL1_2XLARGE. BUILD_GENERAL1_SMALL is only valid if type is set to LINUX_CONTAINER. When type is set to LINUX_GPU_CONTAINER, compute_type need to be BUILD_GENERAL1_LARGE.
environmentVariables (pulumi.Input[list]) - A set of environment variables to make available to builds for this build project.
- name (pulumi.Input[str]) - The environment variable’s name or key.
- type (pulumi.Input[str]) - The type of environment variable. Valid values: PARAMETER_STORE, PLAINTEXT.
- value (pulumi.Input[str]) - The environment variable’s value.
image (pulumi.Input[str]) - The Docker image to use for this build project. Valid values include Docker images provided by CodeBuild (e.g aws/codebuild/standard:2.0), Docker Hub images (e.g. nginx:latest), and full Docker repository URIs such as those for ECR (e.g. 137112412989.dkr.ecr.us-west-2.amazonaws.com/amazonlinux:latest).
imagePullCredentialsType (pulumi.Input[str]) - The type of credentials AWS CodeBuild uses to pull images in your build. Available values for this parameter are CODEBUILD or SERVICE_ROLE. When you use a cross-account or private registry image, you must use SERVICE_ROLE credentials. When you use an AWS CodeBuild curated image, you must use CODEBUILD credentials. Default to CODEBUILD
privilegedMode (pulumi.Input[bool]) - If set to true, enables running the Docker daemon inside a Docker container. Defaults to false.
registryCredential (pulumi.Input[dict]) - Information about credentials for access to a private Docker registry. Registry Credential config blocks are documented below.
- credential (pulumi.Input[str]) - The Amazon Resource Name (ARN) or name of credentials created using AWS Secrets Manager.
- credentialProvider (pulumi.Input[str]) - The service that created the credentials to access a private Docker registry. The valid value, SECRETS_MANAGER, is for AWS Secrets Manager.
type (pulumi.Input[str]) - The type of build environment to use for related builds. Available values are: LINUX_CONTAINER, LINUX_GPU_CONTAINER, WINDOWS_CONTAINER or ARM_CONTAINER.

The logs_config object supports the following:

cloudwatchLogs (pulumi.Input[dict]) - Configuration for the builds to store logs to CloudWatch
- group_name (pulumi.Input[str]) - The group name of the logs in CloudWatch Logs.
- status (pulumi.Input[str]) - Current status of logs in S3 for a build project. Valid values: ENABLED, DISABLED. Defaults to DISABLED.
- streamName (pulumi.Input[str]) - The stream name of the logs in CloudWatch Logs.
s3Logs (pulumi.Input[dict]) - Configuration for the builds to store logs to S3.
- encryptionDisabled (pulumi.Input[bool]) - If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
- location (pulumi.Input[str]) - Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket.
- status (pulumi.Input[str]) - Current status of logs in CloudWatch Logs for a build project. Valid values: ENABLED, DISABLED. Defaults to ENABLED.

The secondary_artifacts object supports the following:

artifactIdentifier (pulumi.Input[str]) - The artifact identifier. Must be the same specified inside AWS CodeBuild buildspec.
encryptionDisabled (pulumi.Input[bool]) - If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
location (pulumi.Input[str]) - Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket. If path is not also specified, then location can also specify the path of the output artifact in the output bucket.
name (pulumi.Input[str]) - The name of the project. If type is set to S3, this is the name of the output artifact object
namespaceType (pulumi.Input[str]) - The namespace to use in storing build artifacts. If type is set to S3, then valid values for this parameter are: BUILD_ID or NONE.
overrideArtifactName (pulumi.Input[bool]) - If set to true, a name specified in the build spec file overrides the artifact name.
packaging (pulumi.Input[str]) - The type of build output artifact to create. If type is set to S3, valid values for this parameter are: NONE or ZIP
path (pulumi.Input[str]) - If type is set to S3, this is the path to the output artifact
type (pulumi.Input[str]) - The build output artifact’s type. Valid values for this parameter are: CODEPIPELINE, NO_ARTIFACTS or S3.

The secondary_sources object supports the following:

auths (pulumi.Input[list]) - Information about the authorization settings for AWS CodeBuild to access the source code to be built. Auth blocks are documented below.
- resource (pulumi.Input[str]) - The resource value that applies to the specified authorization type.
- type (pulumi.Input[str]) - The authorization type to use. The only valid value is OAUTH
buildspec (pulumi.Input[str]) - The build spec declaration to use for this build project’s related builds.
gitCloneDepth (pulumi.Input[float]) - Truncate git history to this many commits.
gitSubmodulesConfig (pulumi.Input[dict]) - Information about the Git submodules configuration for an AWS CodeBuild build project. Git submodules config blocks are documented below. This option is only valid when the type is CODECOMMIT, GITHUB or GITHUB_ENTERPRISE.
- fetchSubmodules (pulumi.Input[bool]) - If set to true, fetches Git submodules for the AWS CodeBuild build project.
insecureSsl (pulumi.Input[bool]) - Ignore SSL warnings when connecting to source control.
location (pulumi.Input[str]) - The location of the source code from git or s3.
reportBuildStatus (pulumi.Input[bool]) - Set to true to report the status of a build’s start and finish to your source provider. This option is only valid when your source provider is GITHUB, BITBUCKET, or GITHUB_ENTERPRISE.
sourceIdentifier (pulumi.Input[str]) - The source identifier. Source data will be put inside a folder named as this parameter inside AWS CodeBuild source directory
type (pulumi.Input[str]) - The type of repository that contains the source code to be built. Valid values for this parameter are: CODECOMMIT, CODEPIPELINE, GITHUB, GITHUB_ENTERPRISE, BITBUCKET or S3.

The source object supports the following:

auths (pulumi.Input[list]) - Information about the authorization settings for AWS CodeBuild to access the source code to be built. Auth blocks are documented below.
- resource (pulumi.Input[str]) - The resource value that applies to the specified authorization type.
- type (pulumi.Input[str]) - The authorization type to use. The only valid value is OAUTH
buildspec (pulumi.Input[str]) - The build spec declaration to use for this build project’s related builds. This must be set when type is NO_SOURCE.
gitCloneDepth (pulumi.Input[float]) - Truncate git history to this many commits.
gitSubmodulesConfig (pulumi.Input[dict]) - Information about the Git submodules configuration for an AWS CodeBuild build project. Git submodules config blocks are documented below. This option is only valid when the type is CODECOMMIT, GITHUB or GITHUB_ENTERPRISE.
- fetchSubmodules (pulumi.Input[bool]) - If set to true, fetches Git submodules for the AWS CodeBuild build project.
insecureSsl (pulumi.Input[bool]) - Ignore SSL warnings when connecting to source control.
location (pulumi.Input[str]) - The location of the source code from git or s3.
reportBuildStatus (pulumi.Input[bool]) - Set to true to report the status of a build’s start and finish to your source provider. This option is only valid when the type is BITBUCKET or GITHUB.
type (pulumi.Input[str]) - The type of repository that contains the source code to be built. Valid values for this parameter are: CODECOMMIT, CODEPIPELINE, GITHUB, GITHUB_ENTERPRISE, BITBUCKET, S3 or NO_SOURCE.

The vpc_config object supports the following:

security_group_ids (pulumi.Input[list]) - The security group IDs to assign to running builds.
subnets (pulumi.Input[list]) - The subnet IDs within which to run builds.
vpc_id (pulumi.Input[str]) - The ID of the VPC within which to run builds.

arn: pulumi.Output[str] = None¶: The ARN of the CodeBuild project.

artifacts: pulumi.Output[dict] = None¶

Information about the project’s build output artifacts. Artifact blocks are documented below.

artifactIdentifier (str) - The artifact identifier. Must be the same specified inside AWS CodeBuild buildspec.
encryptionDisabled (bool) - If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
location (str) - Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket.
name (str) - The name of the project. If type is set to S3, this is the name of the output artifact object
namespaceType (str) - The namespace to use in storing build artifacts. If type is set to S3, then valid values for this parameter are: BUILD_ID or NONE.
overrideArtifactName (bool) - If set to true, a name specified in the build spec file overrides the artifact name.
packaging (str) - The type of build output artifact to create. If type is set to S3, valid values for this parameter are: NONE or ZIP
path (str) - If type is set to S3, this is the path to the output artifact
type (str) - The build output artifact’s type. Valid values for this parameter are: CODEPIPELINE, NO_ARTIFACTS or S3.

badge_enabled: pulumi.Output[bool] = None¶: Generates a publicly-accessible URL for the projects build badge. Available as badge_url attribute when enabled.

badge_url: pulumi.Output[str] = None¶: The URL of the build badge when badge_enabled is enabled.

build_timeout: pulumi.Output[float] = None¶: How long in minutes, from 5 to 480 (8 hours), for AWS CodeBuild to wait until timing out any related build that does not get marked as completed. The default is 60 minutes.

cache: pulumi.Output[dict] = None¶

Information about the cache storage for the project. Cache blocks are documented below.

location (str) - The location where the AWS CodeBuild project stores cached resources. For type S3 the value must be a valid S3 bucket name/prefix.
modes (list) - Specifies settings that AWS CodeBuild uses to store and reuse build dependencies. Valid values: LOCAL_SOURCE_CACHE, LOCAL_DOCKER_LAYER_CACHE, and LOCAL_CUSTOM_CACHE
type (str) - The type of storage that will be used for the AWS CodeBuild project cache. Valid values: NO_CACHE, LOCAL, and S3. Defaults to NO_CACHE.

description: pulumi.Output[str] = None¶: A short description of the project.

encryption_key: pulumi.Output[str] = None¶: The AWS Key Management Service (AWS KMS) customer master key (CMK) to be used for encrypting the build project’s build output artifacts.

environment: pulumi.Output[dict] = None¶

Information about the project’s build environment. Environment blocks are documented below.

certificate (str) - The ARN of the S3 bucket, path prefix and object key that contains the PEM-encoded certificate.
computeType (str) - Information about the compute resources the build project will use. Available values for this parameter are: BUILD_GENERAL1_SMALL, BUILD_GENERAL1_MEDIUM, BUILD_GENERAL1_LARGE or BUILD_GENERAL1_2XLARGE. BUILD_GENERAL1_SMALL is only valid if type is set to LINUX_CONTAINER. When type is set to LINUX_GPU_CONTAINER, compute_type need to be BUILD_GENERAL1_LARGE.
environmentVariables (list) - A set of environment variables to make available to builds for this build project.
- name (str) - The environment variable’s name or key.
- type (str) - The type of environment variable. Valid values: PARAMETER_STORE, PLAINTEXT.
- value (str) - The environment variable’s value.
image (str) - The Docker image to use for this build project. Valid values include Docker images provided by CodeBuild (e.g aws/codebuild/standard:2.0), Docker Hub images (e.g. nginx:latest), and full Docker repository URIs such as those for ECR (e.g. 137112412989.dkr.ecr.us-west-2.amazonaws.com/amazonlinux:latest).
imagePullCredentialsType (str) - The type of credentials AWS CodeBuild uses to pull images in your build. Available values for this parameter are CODEBUILD or SERVICE_ROLE. When you use a cross-account or private registry image, you must use SERVICE_ROLE credentials. When you use an AWS CodeBuild curated image, you must use CODEBUILD credentials. Default to CODEBUILD
privilegedMode (bool) - If set to true, enables running the Docker daemon inside a Docker container. Defaults to false.
registryCredential (dict) - Information about credentials for access to a private Docker registry. Registry Credential config blocks are documented below.
- credential (str) - The Amazon Resource Name (ARN) or name of credentials created using AWS Secrets Manager.
- credentialProvider (str) - The service that created the credentials to access a private Docker registry. The valid value, SECRETS_MANAGER, is for AWS Secrets Manager.
type (str) - The type of build environment to use for related builds. Available values are: LINUX_CONTAINER, LINUX_GPU_CONTAINER, WINDOWS_CONTAINER or ARM_CONTAINER.

logs_config: pulumi.Output[dict] = None¶

Configuration for the builds to store log data to CloudWatch or S3.

cloudwatchLogs (dict) - Configuration for the builds to store logs to CloudWatch
- group_name (str) - The group name of the logs in CloudWatch Logs.
- status (str) - Current status of logs in S3 for a build project. Valid values: ENABLED, DISABLED. Defaults to DISABLED.
- streamName (str) - The stream name of the logs in CloudWatch Logs.
s3Logs (dict) - Configuration for the builds to store logs to S3.
- encryptionDisabled (bool) - If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
- location (str) - Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket.
- status (str) - Current status of logs in CloudWatch Logs for a build project. Valid values: ENABLED, DISABLED. Defaults to ENABLED.

name: pulumi.Output[str] = None¶: The projects name.

queued_timeout: pulumi.Output[float] = None¶: How long in minutes, from 5 to 480 (8 hours), a build is allowed to be queued before it times out. The default is 8 hours.

secondary_artifacts: pulumi.Output[list] = None¶

A set of secondary artifacts to be used inside the build. Secondary artifacts blocks are documented below.

artifactIdentifier (str) - The artifact identifier. Must be the same specified inside AWS CodeBuild buildspec.
encryptionDisabled (bool) - If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
location (str) - Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket. If path is not also specified, then location can also specify the path of the output artifact in the output bucket.
name (str) - The name of the project. If type is set to S3, this is the name of the output artifact object
namespaceType (str) - The namespace to use in storing build artifacts. If type is set to S3, then valid values for this parameter are: BUILD_ID or NONE.
overrideArtifactName (bool) - If set to true, a name specified in the build spec file overrides the artifact name.
packaging (str) - The type of build output artifact to create. If type is set to S3, valid values for this parameter are: NONE or ZIP
path (str) - If type is set to S3, this is the path to the output artifact
type (str) - The build output artifact’s type. Valid values for this parameter are: CODEPIPELINE, NO_ARTIFACTS or S3.

secondary_sources: pulumi.Output[list] = None¶

A set of secondary sources to be used inside the build. Secondary sources blocks are documented below.

auths (list) - Information about the authorization settings for AWS CodeBuild to access the source code to be built. Auth blocks are documented below.
- resource (str) - The resource value that applies to the specified authorization type.
- type (str) - The authorization type to use. The only valid value is OAUTH
buildspec (str) - The build spec declaration to use for this build project’s related builds.
gitCloneDepth (float) - Truncate git history to this many commits.
gitSubmodulesConfig (dict) - Information about the Git submodules configuration for an AWS CodeBuild build project. Git submodules config blocks are documented below. This option is only valid when the type is CODECOMMIT, GITHUB or GITHUB_ENTERPRISE.
- fetchSubmodules (bool) - If set to true, fetches Git submodules for the AWS CodeBuild build project.
insecureSsl (bool) - Ignore SSL warnings when connecting to source control.
location (str) - The location of the source code from git or s3.
reportBuildStatus (bool) - Set to true to report the status of a build’s start and finish to your source provider. This option is only valid when your source provider is GITHUB, BITBUCKET, or GITHUB_ENTERPRISE.
sourceIdentifier (str) - The source identifier. Source data will be put inside a folder named as this parameter inside AWS CodeBuild source directory
type (str) - The type of repository that contains the source code to be built. Valid values for this parameter are: CODECOMMIT, CODEPIPELINE, GITHUB, GITHUB_ENTERPRISE, BITBUCKET or S3.

service_role: pulumi.Output[str] = None¶: The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that enables AWS CodeBuild to interact with dependent AWS services on behalf of the AWS account.

source: pulumi.Output[dict] = None¶

Information about the project’s input source code. Source blocks are documented below.

auths (list) - Information about the authorization settings for AWS CodeBuild to access the source code to be built. Auth blocks are documented below.
- resource (str) - The resource value that applies to the specified authorization type.
- type (str) - The authorization type to use. The only valid value is OAUTH
buildspec (str) - The build spec declaration to use for this build project’s related builds. This must be set when type is NO_SOURCE.
gitCloneDepth (float) - Truncate git history to this many commits.
gitSubmodulesConfig (dict) - Information about the Git submodules configuration for an AWS CodeBuild build project. Git submodules config blocks are documented below. This option is only valid when the type is CODECOMMIT, GITHUB or GITHUB_ENTERPRISE.
- fetchSubmodules (bool) - If set to true, fetches Git submodules for the AWS CodeBuild build project.
insecureSsl (bool) - Ignore SSL warnings when connecting to source control.
location (str) - The location of the source code from git or s3.
reportBuildStatus (bool) - Set to true to report the status of a build’s start and finish to your source provider. This option is only valid when the type is BITBUCKET or GITHUB.
type (str) - The type of repository that contains the source code to be built. Valid values for this parameter are: CODECOMMIT, CODEPIPELINE, GITHUB, GITHUB_ENTERPRISE, BITBUCKET, S3 or NO_SOURCE.

source_version: pulumi.Output[str] = None¶: A version of the build input to be built for this project. If not specified, the latest version is used.

tags: pulumi.Output[dict] = None¶: A map of tags to assign to the resource.

vpc_config: pulumi.Output[dict] = None¶

Configuration for the builds to run inside a VPC. VPC config blocks are documented below.

security_group_ids (list) - The security group IDs to assign to running builds.
subnets (list) - The subnet IDs within which to run builds.
vpc_id (str) - The ID of the VPC within which to run builds.

static get(resource_name, id, opts=None, arn=None, artifacts=None, badge_enabled=None, badge_url=None, build_timeout=None, cache=None, description=None, encryption_key=None, environment=None, logs_config=None, name=None, queued_timeout=None, secondary_artifacts=None, secondary_sources=None, service_role=None, source=None, source_version=None, tags=None, vpc_config=None)¶

Get an existing Project resource’s state with the given name, id, and optional extra properties used to qualify the lookup.

Parameters

resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
arn (pulumi.Input[str]) – The ARN of the CodeBuild project.
artifacts (pulumi.Input[dict]) – Information about the project’s build output artifacts. Artifact blocks are documented below.
badge_enabled (pulumi.Input[bool]) – Generates a publicly-accessible URL for the projects build badge. Available as badge_url attribute when enabled.
badge_url (pulumi.Input[str]) – The URL of the build badge when badge_enabled is enabled.
build_timeout (pulumi.Input[float]) – How long in minutes, from 5 to 480 (8 hours), for AWS CodeBuild to wait until timing out any related build that does not get marked as completed. The default is 60 minutes.
cache (pulumi.Input[dict]) – Information about the cache storage for the project. Cache blocks are documented below.
description (pulumi.Input[str]) – A short description of the project.
encryption_key (pulumi.Input[str]) – The AWS Key Management Service (AWS KMS) customer master key (CMK) to be used for encrypting the build project’s build output artifacts.
environment (pulumi.Input[dict]) – Information about the project’s build environment. Environment blocks are documented below.
logs_config (pulumi.Input[dict]) – Configuration for the builds to store log data to CloudWatch or S3.
name (pulumi.Input[str]) – The projects name.
queued_timeout (pulumi.Input[float]) – How long in minutes, from 5 to 480 (8 hours), a build is allowed to be queued before it times out. The default is 8 hours.
secondary_artifacts (pulumi.Input[list]) – A set of secondary artifacts to be used inside the build. Secondary artifacts blocks are documented below.
secondary_sources (pulumi.Input[list]) – A set of secondary sources to be used inside the build. Secondary sources blocks are documented below.
service_role (pulumi.Input[str]) – The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that enables AWS CodeBuild to interact with dependent AWS services on behalf of the AWS account.
source (pulumi.Input[dict]) – Information about the project’s input source code. Source blocks are documented below.
source_version (pulumi.Input[str]) – A version of the build input to be built for this project. If not specified, the latest version is used.
tags (pulumi.Input[dict]) – A map of tags to assign to the resource.
vpc_config (pulumi.Input[dict]) – Configuration for the builds to run inside a VPC. VPC config blocks are documented below.

The artifacts object supports the following:

artifactIdentifier (pulumi.Input[str]) - The artifact identifier. Must be the same specified inside AWS CodeBuild buildspec.
encryptionDisabled (pulumi.Input[bool]) - If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
location (pulumi.Input[str]) - Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket.
name (pulumi.Input[str]) - The name of the project. If type is set to S3, this is the name of the output artifact object
namespaceType (pulumi.Input[str]) - The namespace to use in storing build artifacts. If type is set to S3, then valid values for this parameter are: BUILD_ID or NONE.
overrideArtifactName (pulumi.Input[bool]) - If set to true, a name specified in the build spec file overrides the artifact name.
packaging (pulumi.Input[str]) - The type of build output artifact to create. If type is set to S3, valid values for this parameter are: NONE or ZIP
path (pulumi.Input[str]) - If type is set to S3, this is the path to the output artifact
type (pulumi.Input[str]) - The build output artifact’s type. Valid values for this parameter are: CODEPIPELINE, NO_ARTIFACTS or S3.

The cache object supports the following:

location (pulumi.Input[str]) - The location where the AWS CodeBuild project stores cached resources. For type S3 the value must be a valid S3 bucket name/prefix.
modes (pulumi.Input[list]) - Specifies settings that AWS CodeBuild uses to store and reuse build dependencies. Valid values: LOCAL_SOURCE_CACHE, LOCAL_DOCKER_LAYER_CACHE, and LOCAL_CUSTOM_CACHE
type (pulumi.Input[str]) - The type of storage that will be used for the AWS CodeBuild project cache. Valid values: NO_CACHE, LOCAL, and S3. Defaults to NO_CACHE.

The environment object supports the following:

certificate (pulumi.Input[str]) - The ARN of the S3 bucket, path prefix and object key that contains the PEM-encoded certificate.
computeType (pulumi.Input[str]) - Information about the compute resources the build project will use. Available values for this parameter are: BUILD_GENERAL1_SMALL, BUILD_GENERAL1_MEDIUM, BUILD_GENERAL1_LARGE or BUILD_GENERAL1_2XLARGE. BUILD_GENERAL1_SMALL is only valid if type is set to LINUX_CONTAINER. When type is set to LINUX_GPU_CONTAINER, compute_type need to be BUILD_GENERAL1_LARGE.
environmentVariables (pulumi.Input[list]) - A set of environment variables to make available to builds for this build project.
- name (pulumi.Input[str]) - The environment variable’s name or key.
- type (pulumi.Input[str]) - The type of environment variable. Valid values: PARAMETER_STORE, PLAINTEXT.
- value (pulumi.Input[str]) - The environment variable’s value.
image (pulumi.Input[str]) - The Docker image to use for this build project. Valid values include Docker images provided by CodeBuild (e.g aws/codebuild/standard:2.0), Docker Hub images (e.g. nginx:latest), and full Docker repository URIs such as those for ECR (e.g. 137112412989.dkr.ecr.us-west-2.amazonaws.com/amazonlinux:latest).
imagePullCredentialsType (pulumi.Input[str]) - The type of credentials AWS CodeBuild uses to pull images in your build. Available values for this parameter are CODEBUILD or SERVICE_ROLE. When you use a cross-account or private registry image, you must use SERVICE_ROLE credentials. When you use an AWS CodeBuild curated image, you must use CODEBUILD credentials. Default to CODEBUILD
privilegedMode (pulumi.Input[bool]) - If set to true, enables running the Docker daemon inside a Docker container. Defaults to false.
registryCredential (pulumi.Input[dict]) - Information about credentials for access to a private Docker registry. Registry Credential config blocks are documented below.
- credential (pulumi.Input[str]) - The Amazon Resource Name (ARN) or name of credentials created using AWS Secrets Manager.
- credentialProvider (pulumi.Input[str]) - The service that created the credentials to access a private Docker registry. The valid value, SECRETS_MANAGER, is for AWS Secrets Manager.
type (pulumi.Input[str]) - The type of build environment to use for related builds. Available values are: LINUX_CONTAINER, LINUX_GPU_CONTAINER, WINDOWS_CONTAINER or ARM_CONTAINER.

The logs_config object supports the following:

cloudwatchLogs (pulumi.Input[dict]) - Configuration for the builds to store logs to CloudWatch
- group_name (pulumi.Input[str]) - The group name of the logs in CloudWatch Logs.
- status (pulumi.Input[str]) - Current status of logs in S3 for a build project. Valid values: ENABLED, DISABLED. Defaults to DISABLED.
- streamName (pulumi.Input[str]) - The stream name of the logs in CloudWatch Logs.
s3Logs (pulumi.Input[dict]) - Configuration for the builds to store logs to S3.
- encryptionDisabled (pulumi.Input[bool]) - If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
- location (pulumi.Input[str]) - Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket.
- status (pulumi.Input[str]) - Current status of logs in CloudWatch Logs for a build project. Valid values: ENABLED, DISABLED. Defaults to ENABLED.

The secondary_artifacts object supports the following:

artifactIdentifier (pulumi.Input[str]) - The artifact identifier. Must be the same specified inside AWS CodeBuild buildspec.
encryptionDisabled (pulumi.Input[bool]) - If set to true, output artifacts will not be encrypted. If type is set to NO_ARTIFACTS then this value will be ignored. Defaults to false.
location (pulumi.Input[str]) - Information about the build output artifact location. If type is set to CODEPIPELINE or NO_ARTIFACTS then this value will be ignored. If type is set to S3, this is the name of the output bucket. If path is not also specified, then location can also specify the path of the output artifact in the output bucket.
name (pulumi.Input[str]) - The name of the project. If type is set to S3, this is the name of the output artifact object
namespaceType (pulumi.Input[str]) - The namespace to use in storing build artifacts. If type is set to S3, then valid values for this parameter are: BUILD_ID or NONE.
overrideArtifactName (pulumi.Input[bool]) - If set to true, a name specified in the build spec file overrides the artifact name.
packaging (pulumi.Input[str]) - The type of build output artifact to create. If type is set to S3, valid values for this parameter are: NONE or ZIP
path (pulumi.Input[str]) - If type is set to S3, this is the path to the output artifact
type (pulumi.Input[str]) - The build output artifact’s type. Valid values for this parameter are: CODEPIPELINE, NO_ARTIFACTS or S3.

The secondary_sources object supports the following:

auths (pulumi.Input[list]) - Information about the authorization settings for AWS CodeBuild to access the source code to be built. Auth blocks are documented below.
- resource (pulumi.Input[str]) - The resource value that applies to the specified authorization type.
- type (pulumi.Input[str]) - The authorization type to use. The only valid value is OAUTH
buildspec (pulumi.Input[str]) - The build spec declaration to use for this build project’s related builds.
gitCloneDepth (pulumi.Input[float]) - Truncate git history to this many commits.
gitSubmodulesConfig (pulumi.Input[dict]) - Information about the Git submodules configuration for an AWS CodeBuild build project. Git submodules config blocks are documented below. This option is only valid when the type is CODECOMMIT, GITHUB or GITHUB_ENTERPRISE.
- fetchSubmodules (pulumi.Input[bool]) - If set to true, fetches Git submodules for the AWS CodeBuild build project.
insecureSsl (pulumi.Input[bool]) - Ignore SSL warnings when connecting to source control.
location (pulumi.Input[str]) - The location of the source code from git or s3.
reportBuildStatus (pulumi.Input[bool]) - Set to true to report the status of a build’s start and finish to your source provider. This option is only valid when your source provider is GITHUB, BITBUCKET, or GITHUB_ENTERPRISE.
sourceIdentifier (pulumi.Input[str]) - The source identifier. Source data will be put inside a folder named as this parameter inside AWS CodeBuild source directory
type (pulumi.Input[str]) - The type of repository that contains the source code to be built. Valid values for this parameter are: CODECOMMIT, CODEPIPELINE, GITHUB, GITHUB_ENTERPRISE, BITBUCKET or S3.

The source object supports the following:

auths (pulumi.Input[list]) - Information about the authorization settings for AWS CodeBuild to access the source code to be built. Auth blocks are documented below.
- resource (pulumi.Input[str]) - The resource value that applies to the specified authorization type.
- type (pulumi.Input[str]) - The authorization type to use. The only valid value is OAUTH
buildspec (pulumi.Input[str]) - The build spec declaration to use for this build project’s related builds. This must be set when type is NO_SOURCE.
gitCloneDepth (pulumi.Input[float]) - Truncate git history to this many commits.
gitSubmodulesConfig (pulumi.Input[dict]) - Information about the Git submodules configuration for an AWS CodeBuild build project. Git submodules config blocks are documented below. This option is only valid when the type is CODECOMMIT, GITHUB or GITHUB_ENTERPRISE.
- fetchSubmodules (pulumi.Input[bool]) - If set to true, fetches Git submodules for the AWS CodeBuild build project.
insecureSsl (pulumi.Input[bool]) - Ignore SSL warnings when connecting to source control.
location (pulumi.Input[str]) - The location of the source code from git or s3.
reportBuildStatus (pulumi.Input[bool]) - Set to true to report the status of a build’s start and finish to your source provider. This option is only valid when the type is BITBUCKET or GITHUB.
type (pulumi.Input[str]) - The type of repository that contains the source code to be built. Valid values for this parameter are: CODECOMMIT, CODEPIPELINE, GITHUB, GITHUB_ENTERPRISE, BITBUCKET, S3 or NO_SOURCE.

The vpc_config object supports the following:

security_group_ids (pulumi.Input[list]) - The security group IDs to assign to running builds.
subnets (pulumi.Input[list]) - The subnet IDs within which to run builds.
vpc_id (pulumi.Input[str]) - The ID of the VPC within which to run builds.

translate_output_property(prop)¶

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters: prop (str) – A property name.
Returns: A potentially transformed property name.
Return type: str

translate_input_property(prop)¶

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters: prop (str) – A property name.
Returns: A potentially transformed property name.
Return type: str

class pulumi_aws.codebuild.SourceCredential(resource_name, opts=None, auth_type=None, server_type=None, token=None, user_name=None, __props__=None, __name__=None, __opts__=None)¶

Provides a CodeBuild Source Credentials Resource.

import pulumi
import pulumi_aws as aws

example = aws.codebuild.SourceCredential("example",
    auth_type="PERSONAL_ACCESS_TOKEN",
    server_type="GITHUB",
    token="example")

import pulumi
import pulumi_aws as aws

example = aws.codebuild.SourceCredential("example",
    auth_type="BASIC_AUTH",
    server_type="BITBUCKET",
    token="example",
    user_name="test-user")

Parameters

resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
auth_type (pulumi.Input[str]) – The type of authentication used to connect to a GitHub, GitHub Enterprise, or Bitbucket repository. An OAUTH connection is not supported by the API.
server_type (pulumi.Input[str]) – The source provider used for this project.
token (pulumi.Input[str]) – For GitHub or GitHub Enterprise, this is the personal access token. For Bitbucket, this is the app password.
user_name (pulumi.Input[str]) – The Bitbucket username when the authType is BASIC_AUTH. This parameter is not valid for other types of source providers or connections.

arn: pulumi.Output[str] = None¶: The ARN of Source Credential.

auth_type: pulumi.Output[str] = None¶: The type of authentication used to connect to a GitHub, GitHub Enterprise, or Bitbucket repository. An OAUTH connection is not supported by the API.

server_type: pulumi.Output[str] = None¶: The source provider used for this project.

token: pulumi.Output[str] = None¶: For GitHub or GitHub Enterprise, this is the personal access token. For Bitbucket, this is the app password.

user_name: pulumi.Output[str] = None¶: The Bitbucket username when the authType is BASIC_AUTH. This parameter is not valid for other types of source providers or connections.

static get(resource_name, id, opts=None, arn=None, auth_type=None, server_type=None, token=None, user_name=None)¶

Get an existing SourceCredential resource’s state with the given name, id, and optional extra properties used to qualify the lookup.

Parameters

resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
arn (pulumi.Input[str]) – The ARN of Source Credential.
auth_type (pulumi.Input[str]) – The type of authentication used to connect to a GitHub, GitHub Enterprise, or Bitbucket repository. An OAUTH connection is not supported by the API.
server_type (pulumi.Input[str]) – The source provider used for this project.
token (pulumi.Input[str]) – For GitHub or GitHub Enterprise, this is the personal access token. For Bitbucket, this is the app password.
user_name (pulumi.Input[str]) – The Bitbucket username when the authType is BASIC_AUTH. This parameter is not valid for other types of source providers or connections.

translate_output_property(prop)¶

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters: prop (str) – A property name.
Returns: A potentially transformed property name.
Return type: str

translate_input_property(prop)¶

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters: prop (str) – A property name.
Returns: A potentially transformed property name.
Return type: str

class pulumi_aws.codebuild.Webhook(resource_name, opts=None, branch_filter=None, filter_groups=None, project_name=None, __props__=None, __name__=None, __opts__=None)¶

Manages a CodeBuild webhook, which is an endpoint accepted by the CodeBuild service to trigger builds from source code repositories. Depending on the source type of the CodeBuild project, the CodeBuild service may also automatically create and delete the actual repository webhook as well.

import pulumi
import pulumi_aws as aws

example = aws.codebuild.Webhook("example",
    filter_groups=[{
        "filter": [
            {
                "pattern": "PUSH",
                "type": "EVENT",
            },
            {
                "pattern": "master",
                "type": "HEAD_REF",
            },
        ],
    }],
    project_name=aws_codebuild_project["example"]["name"])

import pulumi
import pulumi_aws as aws
import pulumi_github as github

example_webhook = aws.codebuild.Webhook("exampleWebhook", project_name=aws_codebuild_project["example"]["name"])
example_repository_webhook = github.RepositoryWebhook("exampleRepositoryWebhook",
    active=True,
    configuration={
        "contentType": "json",
        "insecureSsl": False,
        "secret": example_webhook.secret,
        "url": example_webhook.payload_url,
    },
    events=["push"],
    repository=github_repository["example"]["name"])

Parameters

resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
branch_filter (pulumi.Input[str]) – A regular expression used to determine which branches get built. Default is all branches are built. It is recommended to use filter_group over branch_filter.
filter_groups (pulumi.Input[list]) – Information about the webhook’s trigger. Filter group blocks are documented below.
project_name (pulumi.Input[str]) – The name of the build project.

The filter_groups object supports the following:

filters (pulumi.Input[list]) - A webhook filter for the group. Filter blocks are documented below.
- excludeMatchedPattern (pulumi.Input[bool]) - If set to true, the specified filter does not trigger a build. Defaults to false.
- pattern (pulumi.Input[str]) - For a filter that uses EVENT type, a comma-separated string that specifies one event: PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED, PULL_REQUEST_REOPENED. PULL_REQUEST_MERGED works with GitHub & GitHub Enterprise only. For a filter that uses any of the other filter types, a regular expression.
- type (pulumi.Input[str]) - The webhook filter group’s type. Valid values for this parameter are: EVENT, BASE_REF, HEAD_REF, ACTOR_ACCOUNT_ID, FILE_PATH. At least one filter group must specify EVENT as its type.

branch_filter: pulumi.Output[str] = None¶: A regular expression used to determine which branches get built. Default is all branches are built. It is recommended to use filter_group over branch_filter.

filter_groups: pulumi.Output[list] = None¶

Information about the webhook’s trigger. Filter group blocks are documented below.

filters (list) - A webhook filter for the group. Filter blocks are documented below.
- excludeMatchedPattern (bool) - If set to true, the specified filter does not trigger a build. Defaults to false.
- pattern (str) - For a filter that uses EVENT type, a comma-separated string that specifies one event: PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED, PULL_REQUEST_REOPENED. PULL_REQUEST_MERGED works with GitHub & GitHub Enterprise only. For a filter that uses any of the other filter types, a regular expression.
- type (str) - The webhook filter group’s type. Valid values for this parameter are: EVENT, BASE_REF, HEAD_REF, ACTOR_ACCOUNT_ID, FILE_PATH. At least one filter group must specify EVENT as its type.

payload_url: pulumi.Output[str] = None¶: The CodeBuild endpoint where webhook events are sent.

project_name: pulumi.Output[str] = None¶: The name of the build project.

secret: pulumi.Output[str] = None¶: The secret token of the associated repository. Not returned by the CodeBuild API for all source types.

url: pulumi.Output[str] = None¶: The URL to the webhook.

static get(resource_name, id, opts=None, branch_filter=None, filter_groups=None, payload_url=None, project_name=None, secret=None, url=None)¶

Get an existing Webhook resource’s state with the given name, id, and optional extra properties used to qualify the lookup.

Parameters

resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
branch_filter (pulumi.Input[str]) – A regular expression used to determine which branches get built. Default is all branches are built. It is recommended to use filter_group over branch_filter.
filter_groups (pulumi.Input[list]) – Information about the webhook’s trigger. Filter group blocks are documented below.
payload_url (pulumi.Input[str]) – The CodeBuild endpoint where webhook events are sent.
project_name (pulumi.Input[str]) – The name of the build project.
secret (pulumi.Input[str]) – The secret token of the associated repository. Not returned by the CodeBuild API for all source types.
url (pulumi.Input[str]) – The URL to the webhook.

The filter_groups object supports the following:

filters (pulumi.Input[list]) - A webhook filter for the group. Filter blocks are documented below.
- excludeMatchedPattern (pulumi.Input[bool]) - If set to true, the specified filter does not trigger a build. Defaults to false.
- pattern (pulumi.Input[str]) - For a filter that uses EVENT type, a comma-separated string that specifies one event: PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED, PULL_REQUEST_REOPENED. PULL_REQUEST_MERGED works with GitHub & GitHub Enterprise only. For a filter that uses any of the other filter types, a regular expression.
- type (pulumi.Input[str]) - The webhook filter group’s type. Valid values for this parameter are: EVENT, BASE_REF, HEAD_REF, ACTOR_ACCOUNT_ID, FILE_PATH. At least one filter group must specify EVENT as its type.

translate_output_property(prop)¶

Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.

Parameters: prop (str) – A property name.
Returns: A potentially transformed property name.
Return type: str

translate_input_property(prop)¶

Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.

Parameters: prop (str) – A property name.
Returns: A potentially transformed property name.
Return type: str

The Pulumi Platform

Get Started

Migrate to Pulumi

Solutions for All Teams and Engineers

Any Code

Any Cloud

codebuild¶

On This Page