AWS CodeArtifact Documentation
CodeArtifact
AWS CodeArtifact is now available for Ruby developers to safely store and retrieve their gems. CodeArtifact is compatible with bundler and gem, two common developer tools.
Numerous packages are frequently used by applications to expedite development by offering reusable code for frequent tasks including data manipulation, network access, and cryptography. In order to access distant services, developers can also include SDKs, such the AWS SDKs. These packages could originate from outside sources like open source initiatives or from other departments inside your company. The management of dependencies and packages is essential to software development. Ruby developers commonly utilise gem and bundler, although other languages such as Java, C#, JavaScript, Swift, and Python have tools for fetching and resolving dependencies.
Nevertheless, there are security and legal issues when employing third-party software. It is imperative for organisations to verify that package licences align with their projects and do not infringe against intellectual property rights. It is imperative that they confirm the safety of the supplied code and rule out any potential vulnerabilities that could lead to a supply chain assault. Organisations usually employ private package servers to overcome these issues. Only packages approved by legal and security departments and accessible through private repositories may be used by developers.
With the managed service AWS CodeArtifact, packages may be safely distributed to internal development teams without requiring infrastructure management. In addition to npm, PyPI, Maven, NuGet, SwiftPM, and generic formats, CodeArtifact now supports Ruby gems.
Using already-existing technologies like gem and bundler, you may publish and download Ruby gem dependencies from your CodeArtifact repository on the AWS Cloud. Packages can be referenced in your Gemfile after being stored in AWS CodeArtifact. During the build process, your build system will then download approved packages from the CodeArtifact repository.
Keep and distribute artefacts among accounts, granting your teams and building systems the proper amount of access. Use a fully managed service to cut down on the overhead associated with setting up and maintaining an artefact server or infrastructure. Pay as you go for software packages, requests performed, and data moved outside of the region; you only pay for what you use.
How AWS CodeArtifacts functions
Using well-known package managers and build tools like Maven, Gradle, npm, Yarn, Twine, pip, NuGet, and SwiftPM, you may save artefacts using AWS CodeArtifact. To give you access to the most recent iterations of application dependencies, AWS CodeArtifact has the capability to automatically fetch software packages from public package repositories on demand.
Features of AWS CodeArtifacts
Any size organisation can securely store, publish, and distribute software packages used in software development with AWS CodeArtifact, a fully managed artefact repository service.
Consume public artefact repository packages
With a few clicks, CodeArtifact may be configured to retrieve software packages from public repositories like NuGet.org, Maven Central, PyPI, and the npm Registry. Your developers and CI/CD systems can always get the application dependencies they need since CodeArtifact automatically downloads and saves them from these repositories.
Release and distribute packages
You can publish packages created within your company using the package managers you already have, such npm, pip, yarn, twine, Maven, NuGet, and SwiftPM. Instead of building their own packages, development teams can save time by fetching packages published to and shared in a single organisational repository.
Approve a package’s use and observe its use
CodeArtifact APIs and AWS EventBridge can be used to create automated procedures that approve packages for use. By integrating with AWS CloudTrail, leaders can easily discover packages that require updating or removal by having visibility into which packages are being used and where.
High availability and robustness
AWS CodeArtifact uses Amazon S3 and Amazon DynamoDB to store artefact data and metadata, and it functions in different Availability Zones. Your encrypted data is extremely available and highly durable since it is redundantly stored across many facilities and various devices inside each facility.
Make use of a completely managed service
With CodeArtifact, you can concentrate on providing for your clients rather than setting up and managing your development environment. A highly available solution that can grow to accommodate any software development team’s demands is CodeArtifact. There are no servers to maintain or software updates to do.
Turn on monitoring and access control
Amazon CodeArtifact gives you visibility into who has access to your software packages and control over who can access them thanks to its integrations with AWS CloudTrail and IAM. For package encryption, CodeArtifact additionally interfaces with AWS Key Management Service (KMS).
Package access inside a VPC
By configuring AWS CodeArtifact to use AWS PrivateLink endpoints, you can improve the security of your repositories. This prevents data from being sent over the open internet and enables devices operating within your VPC to access packages stored in CodeArtifact.
CodeArtifact Use cases
Obtain software packages whenever needed. Set up CodeArtifact to retrieve content from publicly accessible repositories, including NuGet, Maven Central, Python Package Index (PyPI), and npm Registry.
Release and distribute packages
By publishing to a central organisational repository, you can safely distribute private products throughout organisations.
Accept bundles and check use
Using CodeArtifact APIs and Amazon EventBridge, create automated review processes. AWS CloudTrail provides package visibility.
Use packages in automated builds, and publish them
Update your private packages securely with IAM and publish new versions by pulling dependencies from CodeArtifact in AWS CodeBuild.
Cost and accessibility
The CodeArtifact fees for Ruby packages are identical to those of the currently supported other package formats. Three criteria determine CodeArtifact’s billing: storage (measured in gigabytes per month), requests, and data transferred to and from other AWS regions or the internet. You can perform your continuous integration and delivery (CI/CD) operations on Amazon Elastic Compute Cloud (Amazon EC2) or AWS CodeBuild, for example, without paying for the CodeArtifact data transfer because data transfer to AWS services in the same Region is free. The information is on the pricing page as usual.
