AWS CodeCommit
A fully managed Git repository service with IAM-based authentication and automatic encryption at rest. It temporarily stopped accepting new customers in July 2024 but returned to general availability in November 2025
Overview
AWS CodeCommit is a fully managed source code management service providing Git repositories. It features access control through IAM users and roles, automatic encryption of stored data via AWS KMS, and tight integration with CodePipeline, enabling CI/CD pipelines that operate entirely within the AWS ecosystem. It temporarily stopped accepting new customers on July 25, 2024, but in response to customer demand it returned to general availability on November 24, 2025, and is open to new customers again (as of August 2026).
IAM-Integrated Authentication and AWS-Native Source Code Management
CodeCommit's primary differentiator is the ability to centrally manage Git repository authentication and authorization through IAM. While GitHub and GitLab require managing SSH keys or personal access tokens per user, CodeCommit allows declarative definition of access control at the repository and branch level using IAM policies. For example, controls like "only the release manager role can push to the main branch" can be implemented using Condition clauses in IAM policies. Both HTTPS (via the Git credential helper) and SSH authentication methods are supported, and using the AWS CLI credential helper enables transparent Git operations with IAM temporary credentials. Stored data is automatically encrypted with AWS KMS customer-managed keys or AWS-managed keys, and communication is protected by TLS. For organizations with strict requirements about where source code is stored, such as financial institutions and government agencies, having repositories confined within an AWS Region is a significant advantage.
CodePipeline Integration and CI/CD Pipeline Patterns
CodeCommit is natively integrated as a source stage in CodePipeline, enabling CI/CD pipelines that automatically trigger builds and tests in CodeBuild and deployments via CodeDeploy upon pushes to the repository. Push events are detected through EventBridge rules, eliminating polling delays and enabling real-time pipeline triggering. Pull request functionality is also available, with approval rule templates that can enforce merge conditions such as "minimum 2 reviewer approvals required." However, compared to GitHub and GitLab, the pull request UI and feature set has been more limited, leaving the code review workflow somewhat lacking. Azure DevOps' Azure Repos also provides a cloud-native Git repository, but Azure Repos remains available for new users as of 2026 and continues its integration with Azure Pipelines.
From New-Customer Suspension to GA Return: The Timeline and Its Lessons
On July 25, 2024, AWS temporarily stopped offering CodeCommit to new customers, and its official blog pointed users toward GitHub, GitLab, Bitbucket, and other services. The policy was later reversed in response to customer feedback: on November 24, 2025, CodeCommit returned to general availability, and new sign-ups have resumed (as of August 2026). The practical lesson this episode leaves is the importance of keeping repositories portable at all times. The Git data itself is easy to move - obtain a complete copy with git clone --mirror and push it to the destination with git push --mirror - but AWS-specific companion settings such as IAM-based access controls, approval rule templates, and EventBridge triggers require redesign for the destination's authentication model (GitHub Organization permissions, GitLab group permissions, etc.) and webhooks. When selecting or migrating between hosting services, it is important to evaluate the migration cost of these settings beyond the Git repository itself.
References (Official AWS Resources)
The primary sources for this page are the official AWS website and documentation. Check the official pages below for the latest specifications and pricing.
- AWS CodePipeline official page
- AWS CodeBuild official page
- AWS CodeDeploy official page
- AWS Documentation (official)
If this page and the official documentation disagree, treat the official documentation as authoritative.