Integrating AWS CodePipeline With GitHub for CI/CD

Introduction

In this guide, we will integrate AWS CodePipeline with GitHub for CI/CD purposes using Pulumi. AWS CodePipeline is a continuous integration and continuous delivery (CI/CD) service for fast and reliable application and infrastructure updates. GitHub is a popular version control platform that allows developers to collaborate on projects.

Step-by-Step Explanation

Step 1: Create an S3 Bucket

First, we need an S3 bucket to store the artifacts generated by the pipeline.

Step 2: Create an IAM Role

Next, we create an IAM role that AWS CodePipeline will assume to interact with other AWS services.

Step 3: Create a CodePipeline

We then create the CodePipeline itself, specifying GitHub as the source and defining the build and deploy stages.

Step 4: Create a CodeBuild Project

A CodeBuild project is needed to build the source code fetched from GitHub.

Summary

In this guide, we integrated AWS CodePipeline with GitHub for CI/CD using Pulumi. We created an S3 bucket for artifacts, an IAM role for permissions, a CodePipeline for the CI/CD workflow, and a CodeBuild project for building the source code.

This setup allows for automated builds and deployments whenever changes are pushed to the GitHub repository.

Full Code Example

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

// Step 1: Create an S3 Bucket
const artifactBucket = new aws.s3.Bucket("artifactBucket", {
    acl: "private",
});

// Step 2: Create an IAM Role
const codePipelineRole = new aws.iam.Role("codePipelineRole", {
    assumeRolePolicy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [
            {
                Action: "sts:AssumeRole",
                Principal: {
                    Service: "codepipeline.amazonaws.com",
                },
                Effect: "Allow",
                Sid: ""
            }
        ]
    }),
});

const codePipelineRolePolicy = new aws.iam.RolePolicy("codePipelineRolePolicy", {
    role: codePipelineRole.id,
    policy: JSON.stringify({
        Version: "2012-10-17",
        Statement: [
            {
                Effect: "Allow",
                Action: [
                    "s3:*",
                    "codebuild:*",
                    "codepipeline:*",
                    "iam:PassRole"
                ],
                Resource: "*"
            }
        ]
    }),
});

// Step 3: Create a CodePipeline
const codePipeline = new aws.codepipeline.Pipeline("codePipeline", {
    roleArn: codePipelineRole.arn,
    artifactStores: [{
        type: "S3",
        location: artifactBucket.bucket,
    }],
    stages: [
        {
            name: "Source",
            actions: [
                {
                    name: "Source",
                    category: "Source",
                    owner: "ThirdParty",
                    provider: "GitHub",
                    version: "1",
                    outputArtifacts: ["sourceOutput"],
                    configuration: {
                        Owner: "<GitHub-Owner>",
                        Repo: "<GitHub-Repo>",
                        Branch: "main",
                        OAuthToken: pulumi.secret("<GitHub-OAuth-Token>"),
                    },
                    runOrder: 1,
                },
            ],
        },
        {
            name: "Build",
            actions: [
                {
                    name: "Build",
                    category: "Build",
                    owner: "AWS",
                    provider: "CodeBuild",
                    version: "1",
                    inputArtifacts: ["sourceOutput"],
                    outputArtifacts: ["buildOutput"],
                    configuration: {
                        ProjectName: "codeBuildProject",
                    },
                    runOrder: 1,
                },
            ],
        },
    ],
});

// Step 4: Create a CodeBuild Project
const codeBuildProject = new aws.codebuild.Project("codeBuildProject", {
    source: {
        type: "GITHUB",
        location: "https://github.com/<GitHub-Owner>/<GitHub-Repo>.git",
        buildspec: "buildspec.yml",
    },
    artifacts: {
        type: "CODEPIPELINE",
    },
    environment: {
        computeType: "BUILD_GENERAL1_SMALL",
        image: "aws/codebuild/standard:4.0",
        type: "LINUX_CONTAINER",
    },
    serviceRole: codePipelineRole.arn,
});

export const s3BucketName = artifactBucket.bucket;
export const codePipelineName = codePipeline.name;
export const codeBuildProjectName = codeBuildProject.name;