Critical
CodeBuild
Regional
CodeBuild Bitbucket source repository URLs should not contain sensitive credentials
PCI DSSNISTISO 27001HIPAA
Description
Ensures CodeBuild projects use OAuth for GitHub or Bitbucket source repository authentication rather than personal access tokens or username/password credentials.
Remediation
To ensure secure authentication, update your CodeBuild project to use OAuth for GitHub or Bitbucket repositories.
Steps
- Open the AWS CodeBuild console at https://console.aws.amazon.com/codebuild/.
- Choose the build project to update.
- From Edit, select Source.
- Choose Disconnect from GitHub / Bitbucket if currently connected.
- Select Connect using OAuth, then choose Connect to GitHub / Bitbucket.
- Authorize the connection when prompted.
- Reconfigure your repository URL and additional settings as needed.
- Choose Update source.
Compliance
PCI DSSNISTISO 27001HIPAA