AWS CodeCommit Deprecated2015年〜
A secure, private Git repository hosting service provided by AWS
What It Does
AWS CodeCommit is a fully managed private Git repository hosting service. It supports standard Git commands and tools, with no limits on repository size or file count. It comes with enterprise-grade security features by default, including fine-grained access control through IAM, automatic encryption at rest and in transit, and operation logging via AWS CloudTrail. No server management is required, and high availability and durability are guaranteed.
Use Cases
CodeCommit is used wherever Git-based version control is needed: source code management for team development, secure storage of confidential code in private repositories, serving as the source stage in CI/CD pipelines with CodePipeline, version control for CloudFormation templates and infrastructure code, and tracking changes to documents and configuration files.
Everyday Analogy
Think of it like a secure document storage service with a safe deposit box. Your important documents (source code) are stored in a secure vault (encrypted repository), accessible only to people with keys (IAM users). All document changes are recorded, and you can revert to any previous version at any time. The vault management and security are handled by the storage service (AWS), so you can focus on the content.
What Is CodeCommit?
AWS CodeCommit is a fully managed Git repository hosting service provided by AWS. Like GitHub and GitLab, it manages Git repositories, but since it runs on AWS infrastructure, you can leverage AWS-native security features such as IAM integration and data encryption. Repositories are protected with the same durability as S3 and are automatically replicated across multiple Availability Zones.
Key Features
CodeCommit has no upper limit on repository size, making it suitable for large monorepos. IAM policies enable access control at the repository and branch level, allowing you to restrict pushes to specific branches. The pull request feature lets you build code review workflows, and you can set approval rules requiring a minimum number of approvals before merging. SNS notifications and trigger features let you connect push and pull request events to Lambda functions and other services.
Security and Encryption
CodeCommit data is automatically encrypted at rest with AWS KMS. Data in transit is encrypted via HTTPS or SSH, preventing data leaks during transmission. In addition to IAM user and role access control, you can apply organization-wide access rules using AWS Organizations Service Control Policies (SCPs). Integration with CloudTrail automatically records audit logs of who accessed which repository and when. You can find related technical books on security and encryption at Amazon.
Pricing
CodeCommit is free for the first 5 users. The free tier includes 50 GB of storage and 10,000 Git requests per month. From the 6th user onward, it costs $1 per user per month, with additional storage and requests available at low cost. Small teams can effectively use it for free.
Things to Watch Out For
- Since July 2024, CodeCommit usage has been restricted for new AWS accounts. Existing accounts can continue using it, but consider GitHub or GitLab for new projects
- HTTPS connections require Git credential helper configuration. Generate HTTPS Git credentials for your IAM user or configure the credential-helper
