CodeBuild

 

기본 이미지가 될 레파지토리를 만든다

 

 

# https://hub.docker.com/r/adoptopenjdk/openjdk11

docker pull adoptopenjdk/openjdk11
# openjdk11 버전을 도커허브에서 다운 받는다

docker tag adoptopenjdk/openjdk11 225953240914.dkr.ecr.ap-northeast-2.amazonaws.com/adoptopenjdk/openjdk11:latest
# 다운 받은 이미지를 ecr에 푸시하기위해 태그 설정을 한다.

$(aws ecr get-login --no-include-email --region ap-northeast-2)
# ecr에 푸시하기 위한 인증 절차
# 나온 명령어를 통해 docker login을 한다
# https://docs.aws.amazon.com/ko_kr/AmazonECR/latest/userguide/registry_auth.html

docker push 225953240914.dkr.ecr.ap-northeast-2.amazonaws.com/adoptopenjdk/openjdk11:latest
# ecr에 이미지를 푸시한다

 

 

 

---

 

---

IAM - role 

 

CodeBuild 생성시 적용할 Role 자동 추가

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Resource": [
                "arn:aws:logs:ap-northeast-2:225953240914:log-group:/aws/codebuild/base-frame-build",
                "arn:aws:logs:ap-northeast-2:225953240914:log-group:/aws/codebuild/base-frame-build:*"
            ],
            "Action": [
                "logs:CreateLogGroup",
                "logs:CreateLogStream",
                "logs:PutLogEvents"
            ]
        },
        {
            "Effect": "Allow",
            "Resource": [
                "arn:aws:s3:::codepipeline-ap-northeast-2-*"
            ],
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:GetObjectVersion",
                "s3:GetBucketAcl",
                "s3:GetBucketLocation"
            ]
        },
        {
            "Effect": "Allow",
            "Resource": [
                "arn:aws:s3:::zero-code-build",
                "arn:aws:s3:::zero-code-build/*"
            ],
            "Action": [
                "s3:PutObject",
                "s3:GetBucketAcl",
                "s3:GetBucketLocation"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "codebuild:CreateReportGroup",
                "codebuild:CreateReport",
                "codebuild:UpdateReport",
                "codebuild:BatchPutTestCases",
                "codebuild:BatchPutCodeCoverages"
            ],
            "Resource": [
                "arn:aws:codebuild:ap-northeast-2:225953240914:report-group/base-frame-build-*"
            ]
        }
    ]
}

 

 

이후 해당 Role에