steampipe plugin install awssteampipe plugin install aws

Table: aws_codebuild_project

An AWS CodeBuild project configures how CodeBuild builds your source code. For example, it tells CodeBuild where to get the source code and which build environment to use.

Examples

Basic info

select
  name,
  description,
  encryption_key,
  concurrent_build_limit,
  source_version,
  service_role,
  created,
  last_modified,
  region
from
  aws_codebuild_project;

Get the build input details for each project

select
  name,
  source_version,
  source ->> 'Auth' as auth,
  source ->> 'BuildStatusConfig' as build_status_config,
  source ->> 'Buildspec' as build_spec,
  source ->> 'GitCloneDepth' as git_clone_depth,
  source ->> 'GitSubmodulesConfig' as git_submodules_config,
  source ->> 'InsecureSsl' as insecure_ssl,
  source ->> 'Location' as location,
  source ->> 'ReportBuildStatus' as report_build_status,
  source ->> 'SourceIdentifier' as source_identifier,
  source ->> 'Type' as type
from
  aws_codebuild_project;

List projects which are not created within a VPC

select
  name,
  description,
  vpc_config
from
  aws_codebuild_project
where
  vpc_config is null;

List projects that do not have logging enabled

select
  name,
  description,
  logs_config -> 'CloudWatchLogs' ->> 'Status' as cloud_watch_logs_status,
  logs_config -> 'S3Logs' ->> 'Status' as s3_logs_status
from
  aws_codebuild_project
where
  logs_config -> 'CloudWatchLogs' ->> 'Status' = 'DISABLED'
  and logs_config -> 'S3Logs' ->> 'Status' = 'DISABLED';

List private build projects

select
  name,
  arn,
  project_visibility
from
  aws_codebuild_project
where
  project_visibility = 'PRIVATE';

Query examples

Control examples

.inspect aws_codebuild_project

AWS CodeBuild Project

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The Amazon Resource Name (ARN) of the build project.
artifacts	jsonb	Information about the build output artifacts for the build project.
badge	jsonb	Information about the build badge for the build project.
build_batch_config	jsonb	A ProjectBuildBatchConfig object that defines the batch build options for the project.
cache	jsonb	Information about the cache for the build project.
concurrent_build_limit	bigint	The maximum number of concurrent builds that are allowed for this project.
created	timestamp with time zone	When the build project was created, expressed in Unix time format.
description	text	A description that makes the build project easy to identify.
encryption_key	text	The AWS Key Management Service (AWS KMS) customer master key (CMK) to be.
environment	jsonb	Information about the build environment for this build project.
file_system_locations	jsonb	An array of ProjectFileSystemLocation objects for a CodeBuild build project.
last_modified	timestamp with time zone	When the build project's settings were last modified, expressed in Unix time format.
logs_config	jsonb	Information about logs for the build project. A project can create logs in Amazon CloudWatch Logs, an S3 bucket or both.
name	text	The name of the build project.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
project_visibility	text	Visibility of the build project.
queued_timeout_in_minutes	bigint	The number of minutes a build is allowed to be queued before it times out.
region	text	The AWS Region in which the resource is located.
secondary_artifacts	jsonb	An array of ProjectArtifacts objects.
secondary_source_versions	jsonb	An array of ProjectSource objects.
secondary_sources	jsonb	An array of ProjectSource objects.
service_role	text	The ARN of the AWS Identity and Access Management (IAM) role that enables AWS CodeBuild to interact with dependent AWS services on behalf of the AWS account.
source	jsonb	Information about the build input source code for this build project.
source_version	text	A version of the build input to be built for this project.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tag key and value pairs associated with this build project.
timeout_in_minutes	bigint	How long, in minutes, from 5 to 480 (8 hours), for AWS CodeBuild to wait before timing out any related build that did not get marked as completed.
title	text	Title of the resource.
vpc_config	jsonb	Information about the VPC configuration that AWS CodeBuild accesses.
webhook	jsonb	Information about a webhook that connects repository events to a build project in AWS CodeBuild.

turbot/aws