Is it possible to use an encrypted file system with CodeBuild?

Question

We're finding CodeBuild to be an ideal option for running an ETL orchestration script with steps to run/monitor a Glue job, import resulting files into a destination system, etc. In order to import the files, they must be copied from S3 into the local filesystem. The import tool doesn't know how to access S3 objects directly. These files include sensitive data that must be encrypted at rest in all situations.  
  
Is there any way to have a CodeBuild Ubuntu Docker image use an encrypted file system? Going in I thought that should be easy...just have it mount an encrypted EBS volume...but it's not looking as simple as I'd hoped.  
  
Any thoughts are greatly appreciated!

Answer

You can mount an EFS volume to CodeBuild container (https://docs.aws.amazon.com/codebuild/latest/userguide/sample-efs.html). EFS supports encryption at rest. From your build container you can access the mounted EFS volume securely.  
  
Let us know if that doesn't work for your use case.

Is it possible to use an encrypted file system with CodeBuild?

Relevant content