terraform AWS CodePipeline configuration for CodeBuild sourc

Question

我正在尝试使用terraform来创建CodePipeline作业。我已经有一个有效的CodeBuild项目。这是我的资源：

resource "aws_codepipeline" "my-project" {
  name     = "my-project"
  role_arn = "${aws_iam_role.my-project-codepipeline.arn}"
  artifact_store {
    location = "${aws_s3_bucket.my-artifacts.bucket}"
    type     = "S3"
  }
  stage {
    name = "Source"
    action {
      name     = "Source"
      category = "Source"
      owner    = "AWS"
      provider = "CodeCommit"
      version  = "1"
      configuration {
        ProjectName = "my-project"
        Branch      = "master"
      }
    }
  }
  stage {
    name = "Build"
    action {
      name     = "Build"
      category = "Build"
      owner    = "AWS"
      provider = "CodeBuild"
      version  = "1"
      configuration {
        ProjectName = "my-project"
      }
    }
  }
}

当我尝试terraform apply时，我得到的错误是Error creating CodePipeline: InvalidActionDeclarationException: Action configuration for action 'Source' contains unknown configuration 'ProjectName'.在哪里可以找到此配置部分的正确架构？到目前为止，我找到的所有文档和示例都是通用的，省略了我在这里需要的特定 CodeBuild 设置/模式。

Answer 1

原来我需要的源设置是

RepositoryName = "my-project"
BranchName = "master"

Answer 2

如果您最终需要访问 CodeBuild sts 令牌，这可能会有所帮助。

version: 0.2
env:
  variables:
    AWS_DEFAULT_REGION: "us-west-2"
phases:
  install:
    commands:
      - apt-get -y update
      - apt-get -y install jq
  pre_build:
      commands:
      # load acs submodule (since codebuild doesn't pull the .git folder from the repo
      - cd common 
      - git clone https://[e-mail]/aws-account-tools/acs.git
      - cd ../
      #install terraform
      - other/install-tf-linux64.sh
      - terraform --version
      #set env variables for terraform provider
      - curl 169.254.170.2$AWS_CONTAINER_CREDENTIALS_RELATIVE_URI | jq 'to_entries | [ .[] | select(.key | (contains("Expiration") or contains("RoleArn"))  | not) ] |  map(if .key == "AccessKeyId" then . + {"key":"AWS_ACCESS_KEY_ID"} else . end) | map(if .key == "SecretAccessKey" then . + {"key":"AWS_SECRET_ACCESS_KEY"} else . end) | map(if .key == "Token" then . + {"key":"AWS_SESSION_TOKEN"} else . end) | map("export (.key)=(.value)") | .[]' -r > /tmp/cred.txt # work around https://github.com/hashicorp/terraform/issues/8746
      - chmod +x /tmp/cred.txt
      - . /tmp/cred.txt
  build:
    commands:
      - ls
      - cd your/repo's/folder/with/main.tf 
      - terraform init 
      - terraform plan 
      - terraform 

应用