Use AMS Self-Service Provisioning (SSP) mode to access AWS CodeCommit capabilities directly in your AMS managed account. AWS CodeCommit is a fully managed source control
Note
To onboard CodeCommit, CodeBuild, CodeDeploy, and CodePipeline with a single RFC, submit the
Management | AWS service | Self-provisioned service | Add (review required) (ct-3qe6io8t6jtny) change
type and request the three services: CodeBuild, CodeDeploy and CodePipeline. Then, all three roles,
customer_codebuild_service_role, customer_codedeploy_service_role,
and aws_code_pipeline_service_role are provisioned in your account. After provisioning in your
account, you must onboard the role in your federation solution.
CodeCommit in AWS Managed Services FAQs
Q: How do I request access to CodeCommit in my AMS account?
AWS CodeCommit console and data access roles can be requested through the submission of two AWS Service RFCs, console access, and data access:
Request access to AWS CodeCommit by submitting an RFC with the Management | AWS service | Self-provisioned service | Add (ct-1w8z66n899dct) change type. This RFC provisions the following IAM role to your account:
customer_codecommit_console_role. After it's provisioned in your account, you must onboard the role in your federation solution.Data access (such as Training and Entity Lists) require separate CTs for each data source specifying the S3 data source (mandatory), output bucket (mandatory) and KMS (optional). There are no limitations to AWS CodeCommit job creation as long as all data sources have been granted access roles. To request data access, submit an RFC with the Management | Other | Other | Create (ct-1e1xtak34nx76).
Q: What are the restrictions to using AWS CodeCommit in my AMS account?
Triggers feature on CodeCommit are disabled given the associated rights to create SNS topics. Directly
authenticating against CodeCommit is restricted, users should authenticate
with Credential Helper. Some KMS commands are also restricted: kms:Encrypt,
kms:Decrypt, kms:ReEncrypt, kms:GenereteDataKey,
kms:GenerateDataKeyWithoutPlaintext, and kms:DescribeKey.
Q: What are the prerequisites or dependencies to using AWS CodeCommit in my AMS account?
If S3 buckets are encrypted with KMS keys, S3 and KMS are required to use AWS CodeCommit.
