CodeCommit 与 CodeBuild

Welcome to the first lesson in our CI/CD for Serverless Applications course! Continuous Integration and Continuous Delivery (CI/CD) are crucial for modern software development.

In this lesson, we'll dive into two foundational AWS services: AWS CodeCommit for source control and AWS CodeBuild for compiling and packaging your serverless code.

AWS CodeCommit is a fully managed source control service that hosts secure Git-based repositories. Think of it as AWS's version of GitHub or GitLab, but tightly integrated with other AWS services.

• It's private: Your code stays within AWS.
• It's scalable: Handles projects of any size.
• It's Git-compatible: Use your existing Git tools and workflows.

It acts as the central hub for your application's source code.

To start using CodeCommit, you first need to create a repository. You can do this via the AWS Management Console, AWS CLI, or SDKs.

Once created, you'll configure your local Git client to connect to it. This often involves setting up IAM credentials (HTTPS Git credentials) or SSH keys for authentication.

After setting up your credentials, you can clone your CodeCommit repository to your local machine and push changes just like any other Git repository.

Here's a basic sequence of commands you'd use:

AWS CodeBuild is a fully managed continuous integration service that compiles your source code, runs tests, and produces deployable software packages. It eliminates the need to provision, manage, and scale your own build servers.

• No servers to manage: AWS handles the infrastructure.
• Scales automatically: Builds run in parallel and scale as needed.
• Pay-as-you-go: You only pay for the compute time used.

The core of a CodeBuild project is the buildspec.yml file. This YAML file defines the commands and actions CodeBuild performs during a build.

It specifies build commands, artifact (output) definitions, and caching instructions. It's placed at the root of your source repository.

A buildspec.yml is organized into phases:

• install: Install dependencies.
• pre_build: Commands before build (e.g., login to Docker).
• build: Actual build commands (e.g., compile code, run tests).
• post_build: Commands after build (e.g., package artifacts).

Here's a simple example for a Python Lambda function:

To use CodeBuild, you create a build project. This involves:

• Source: Pointing to your source code repository (e.g., CodeCommit).
• Environment: Selecting an operating system, runtime, and compute type.
• Buildspec: Specifying the buildspec.yml file.
• Artifacts: Defining where to store build outputs (e.g., S3 bucket).

You'll also assign an IAM role to CodeBuild, granting it permissions to access your source, S3, and other necessary AWS services.

The typical workflow for continuous integration using these services is:

1. Developer pushes code changes to an AWS CodeCommit repository.
2. CodeCommit can trigger an AWS CodeBuild project automatically (often via CodePipeline, which we'll cover next).
3. CodeBuild fetches the latest code, executes the commands in buildspec.yml.
4. CodeBuild produces artifacts (like a zipped Lambda function) and stores them in an S3 bucket, ready for deployment.

You've just learned about CodeCommit and CodeBuild. Let's test your understanding!

Great job! In this lesson, you learned about:

• AWS CodeCommit: A managed Git repository service for secure source control.
• AWS CodeBuild: A fully managed continuous integration service that compiles and packages your code.
• The importance of the buildspec.yml file for defining build steps.

These two services form the backbone of your serverless CI/CD pipeline. Next, we'll see how AWS CodePipeline orchestrates these services for automated deployments!