AWS CodeBuild

An AWS managed service for building and testing code.

AWS CodeBuild is a fully managed build service that runs source code builds and tests.

• Building applications
• Automated testing
• Building container images

• Used in the build stage of CI/CD
• Provides a managed build environment
• Integrates with CodePipeline

• Define build steps in buildspec.yml
• Control AWS permissions during builds via IAM roles
• Consider how to split responsibility with GitHub Actions

AWS CodeBuild is a fully managed build service that compiles, tests, and packages source code. Each build runs in an isolated Docker container, ensuring no environmental contamination and high reproducibility. It integrates directly with repositories such as GitHub, CodeCommit, and Bitbucket, and can output build artifacts (binaries, ZIP files, Docker images) to Amazon S3 or Amazon ECR. No server management is required, and pricing is consumption-based according to actual build time. The build process is defined per phase in a buildspec.yml file placed at the project root. The basic structure consists of four phases: install (installing dependencies), pre_build (preparing tests), build (compiling and running tests), and post_build (packaging and pushing artifacts). Each phase's commands are described in YAML. The build image can be selected from AWS-provided managed images (Node.js, Java, Python, Go, etc.) or custom images registered in ECR. For environment variables, integration with SSM Parameter Store and AWS Secrets Manager is provided, allowing API keys and other secret information to be injected safely without exposing them in build logs. CLF-C02 asks questions such as "Which is AWS's continuous integration (CI) service?". It is important to organize and remember the roles of four services: CodeCommit (source management), CodeBuild (build and test), CodeDeploy (deployment), and CodePipeline (pipeline integration).

• AWS CodeBuild (AWS Official)
• What is AWS CodeBuild (AWS Official Documentation)

Last updated: 2026-06-07