Is it possible to use an encrypted file system with CodeBuild?


We're finding CodeBuild to be an ideal option for running an ETL orchestration script with steps to run/monitor a Glue job, import resulting files into a destination system, etc. In order to import the files, they must be copied from S3 into the local filesystem. The import tool doesn't know how to access S3 objects directly. These files include sensitive data that must be encrypted at rest in all situations.

Is there any way to have a CodeBuild Ubuntu Docker image use an encrypted file system? Going in I thought that should be easy...just have it mount an encrypted EBS volume...but it's not looking as simple as I'd hoped.

Any thoughts are greatly appreciated!

asked 5 years ago337 views
1 Answer

You can mount an EFS volume to CodeBuild container ( EFS supports encryption at rest. From your build container you can access the mounted EFS volume securely.

Let us know if that doesn't work for your use case.

Subin M
answered 5 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions