AWS CodeBuild Report Group
This page shows how to write Terraform and CloudFormation for CodeBuild Report Group and write them securely.
aws_codebuild_report_group (Terraform)
The Report Group in CodeBuild can be configured in Terraform with the resource name aws_codebuild_report_group. The following sections describe 5 examples of how to use the resource and its parameters.
Example Usage from GitHub
resource "aws_codebuild_report_group" "report_yesisonline" {
name = "yesisonline report group"
type = "TEST"
export_config {
type = "S3"
resource "aws_codebuild_report_group" "encrypted_report_group" {
export_config {
type = "S3"
s3_destination {
bucket = "some-bucket"
encryption_disabled = false
resource "aws_codebuild_report_group" "encrypted_report_group" {
export_config {
type = "S3"
s3_destination {
bucket = "some-bucket"
encryption_disabled = false
resource "aws_codebuild_report_group" "encrypted_report_group" {
export_config {
type = "S3"
s3_destination {
bucket = "some-bucket"
encryption_disabled = false
resource "aws_codebuild_report_group" "non-encrypted" {
name = "codebuild-report-group-non-kms-cmk-encrypted"
type = "TEST"
export_config {
type = "S3"
Parameters
-
arnoptional computed - string -
createdoptional computed - string -
delete_reportsoptional - bool -
idoptional computed - string -
namerequired - string -
tagsoptional - map from string to string -
typerequired - string -
export_configlist block-
typerequired - string -
s3_destinationlist block-
bucketrequired - string -
encryption_disabledoptional - bool -
encryption_keyrequired - string -
packagingoptional - string -
pathoptional - string
-
-
Explanation in Terraform Registry
Provides a CodeBuild Report Groups Resource.
Tips: Best Practices for The Other AWS CodeBuild Resources
In addition to the aws_codebuild_project, AWS CodeBuild has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.
aws_codebuild_project
Ensure to enable encryption of CodeBuild artifacts
It's better to protect CodeBuild project artifacts with default encryption.
AWS::CodeBuild::ReportGroup (CloudFormation)
The ReportGroup in CodeBuild can be configured in CloudFormation with the resource name AWS::CodeBuild::ReportGroup. The following sections describe how to use the resource and its parameters.
Example Usage from GitHub
An example could not be found in GitHub.
Parameters
-
Typerequired - String -
ExportConfigrequired - ReportExportConfig -
DeleteReportsoptional - Boolean -
Tagsoptional - List of Tag -
Nameoptional - String
Explanation in CloudFormation Registry
Represents a report group. A report group contains a collection of reports.
Frequently asked questions
What is AWS CodeBuild Report Group?
AWS CodeBuild Report Group is a resource for CodeBuild of Amazon Web Service. Settings can be wrote in Terraform and CloudFormation.
Where can I find the example code for the AWS CodeBuild Report Group?
For Terraform, the yesisonline/DevOps, SnidermanIndustries/checkov-fork and bridgecrewio/checkov source code examples are useful. See the Terraform Example section for further details.
