CodeCommit - Protect Master Branch

Question

Hi AWS-Support,
can you please tell me how to protect my master/main-branch from adjustments without any Pull Request?

I want that everyone needs to create a branch first and then ask for approval with a Pull Request.
Now the situation is that if you work directly in master you can push your changes without a Pull Request. I couldn't find any page where to define a protected branch like master or main.

Thanks,
Mario

Answer

AWS CodeCommit supports branch-level access permissions. You can restrict who can commit changes to the main branch or any branch through IAM.

Check this AWS blog post for more information:
https://aws.amazon.com/blogs/devops/refining-access-to-branches-in-aws-codecommit/

Answer

This is the most non-intuitive and backward way to do something that should be incredibly simple. Between this and the "Approvers" fiasco, I wonder if anyone who built this product at Amazon ever looked at another solution in the same space. This is the most unfriendly way to go about doing something very simple. Why is it so overcomplicated???

It also doesn't solve the problem of protecting the branch. It just protects the branch from a group of people, while giving another group of people the ability to do whatever they want with the branch.

CodeCommit - Protect Master Branch

Conteúdo relevante