Critical
CodeBuild
Regional
CodeBuild Bitbucket source repository URLs should not contain sensitive credentials
PCI DSSNISTISO 27001HIPAA
Description
Checks whether the GitHub or Bitbucket source repository URL in AWS CodeBuild projects uses OAuth for authentication instead of personal access tokens or username and password.
Remediation
To ensure secure authentication, update your CodeBuild project to use OAuth for GitHub or Bitbucket repositories.
Steps
- Open the AWS CodeBuild console at https://console.aws.amazon.com/codebuild/.
- Choose the build project to update.
- From Edit, select Source.
- Choose Disconnect from GitHub / Bitbucket if currently connected.
- Select Connect using OAuth, then choose Connect to GitHub / Bitbucket.
- Authorize the connection when prompted.
- Reconfigure your repository URL and additional settings as needed.
- Choose Update source.
Compliance
PCI DSSNISTISO 27001HIPAA