Benchmark: CodeBuild

Usage

Browse dashboards and select CodeBuild:

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check aws_compliance.benchmark.all_controls_codebuild

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_compliance.benchmark.all_controls_codebuild

Controls

• CodeBuild project artifact encryption should be enabled
• CodeBuild projects should not be unused for 90 days or greater
• CodeBuild project environments should not have privileged mode enabled
• CodeBuild projects should have logging enabled
• CodeBuild project plaintext environment variables should not contain sensitive AWS values
• CodeBuild project S3 logs should be encrypted
• CodeBuild GitHub or Bitbucket source repository URLs should use OAuth
• CodeBuild projects should not use an user controlled buildspec

Tags