Way to Remove/Deploy Files below/to Windows\System32 when using CodeDeploy

When working with CodeDeploy to manage files in sensitive Windows system directories like C:\Windows\System32, you're encountering permission issues because CodeDeploy agent typically runs with restricted permissions for security reasons.

Here are some insights and potential solutions:

1. Permission Issues: The CodeDeploy agent doesn't have sufficient permissions to modify content in protected system directories like Windows\System32. This is by design to prevent unauthorized modifications to critical system files.

2. Cleanup Process: During deployments, CodeDeploy uses a cleanup file located at C:\ProgramData\Amazon\CodeDeploy\deployment-instructions\deployment-group-ID-cleanup to remove previously installed files before starting a new deployment. However, this process still operates within the agent's permission boundaries.

3. File Handling Options: While you've correctly identified the file_exists_behavior: OVERWRITE setting, this only works for locations where the agent has sufficient permissions.

Potential solutions:

1. Use a Custom Script with Elevated Permissions: Instead of directly trying to modify system folders through CodeDeploy, create a deployment script that:

• Registers as a scheduled task that runs with SYSTEM privileges
• Performs the necessary file operations
• Can be triggered by your deployment

2. Alternative Deployment Location: Consider deploying to a non-system location first, then use a script running with appropriate permissions to copy files to the restricted location.

3. Service Configuration: If possible, reconfigure your service to look for the driver in a different, more accessible location rather than modifying system directories.

4. Pre-deployment Configuration: Set up the necessary permissions or folder structure before deployment, possibly during instance initialization.

Using CodeDeploy to directly manage files in system directories is generally not recommended due to these security constraints. A hybrid approach using CodeDeploy for application deployment and custom scripts with appropriate permissions for system modifications is often more effective.
Sources
Redeploy and roll back a deployment with CodeDeploy - AWS CodeDeploy
CodeDeploy automated logs cleanup. | AWS re:Post
AppSpec 'files' section (EC2/On-Premises deployments only) - AWS CodeDeploy