codebuild:StartBuild

Write

codebuild:StartBuild is a Write access-level action in the codebuild service. Grants permission to start running a build

Resource types

ARNs that codebuild:StartBuild can be scoped to in an IAM policy.

arn:${Partition}:codebuild:${Region}:${Account}:project/${ProjectName} required
project

Condition keys

Keys you can use in the Condition block of a policy that grants codebuild:StartBuild.

codebuild:artifacts Bool

Filters access by the API corresponding argument value

codebuild:artifacts.bucketOwnerAccess String

Filters access by the API corresponding argument value

codebuild:artifacts.encryptionDisabled Bool

Filters access by the API corresponding argument value

codebuild:artifacts.location String

Filters access by the API corresponding argument value

codebuild:autoRetryLimit Numeric

Filters access by the API corresponding argument value

codebuild:cache Bool

Filters access by the API corresponding argument value

codebuild:cache.location String

Filters access by the API corresponding argument value

codebuild:cache.modes ArrayOfString

Filters access by the API corresponding argument value

codebuild:cache.type String

Filters access by the API corresponding argument value

codebuild:encryptionKey String

Filters access by the API corresponding argument value

codebuild:environment Bool

Filters access by the API corresponding argument value

codebuild:environment.certificate String

Filters access by the API corresponding argument value

codebuild:environment.computeType String

Filters access by the API corresponding argument value

codebuild:environment.environmentVariables Bool

Filters access by the API corresponding argument value

codebuild:environment.environmentVariables.name ArrayOfString

Filters access by the API corresponding argument value

codebuild:environment.environmentVariables.value ArrayOfString

Filters access by the API corresponding argument value

codebuild:environment.environmentVariables/${name}.value String

Filters access by the API corresponding argument value

codebuild:environment.fleet.fleetArn ARN

Filters access by the API corresponding argument value

codebuild:environment.image String

Filters access by the API corresponding argument value

codebuild:environment.imagePullCredentialsType String

Filters access by the API corresponding argument value

codebuild:environment.privilegedMode Bool

Filters access by the API corresponding argument value

codebuild:environment.registryCredential Bool

Filters access by the API corresponding argument value

codebuild:environment.registryCredential.credential String

Filters access by the API corresponding argument value

codebuild:environment.registryCredential.credentialProvider String

Filters access by the API corresponding argument value

codebuild:environment.type String

Filters access by the API corresponding argument value

codebuild:logsConfig Bool

Filters access by the API corresponding argument value

codebuild:logsConfig.s3Logs Bool

Filters access by the API corresponding argument value

codebuild:logsConfig.s3Logs.bucketOwnerAccess String

Filters access by the API corresponding argument value

codebuild:logsConfig.s3Logs.encryptionDisabled Bool

Filters access by the API corresponding argument value

codebuild:logsConfig.s3Logs.location String

Filters access by the API corresponding argument value

codebuild:logsConfig.s3Logs.status String

Filters access by the API corresponding argument value

codebuild:secondaryArtifacts Bool

Filters access by the API corresponding argument value

codebuild:secondaryArtifacts.artifactIdentifier ArrayOfString

Filters access by the API corresponding argument value

codebuild:secondaryArtifacts.bucketOwnerAccess ArrayOfString

Filters access by the API corresponding argument value

codebuild:secondaryArtifacts.encryptionDisabled ArrayOfBool

Filters access by the API corresponding argument value

codebuild:secondaryArtifacts.location ArrayOfString

Filters access by the API corresponding argument value

codebuild:secondaryArtifacts/${artifactIdentifier}.bucketOwnerAccess String

Filters access by the API corresponding argument value

codebuild:secondaryArtifacts/${artifactIdentifier}.encryptionDisabled Bool

Filters access by the API corresponding argument value

codebuild:secondaryArtifacts/${artifactIdentifier}.location String

Filters access by the API corresponding argument value

codebuild:secondarySources Bool

Filters access by the API corresponding argument value

codebuild:secondarySources.auth.resource ArrayOfString

Filters access by the API corresponding argument value

codebuild:secondarySources.auth.type ArrayOfString

Filters access by the API corresponding argument value

codebuild:secondarySources.buildStatusConfig.context ArrayOfString

Filters access by the API corresponding argument value

codebuild:secondarySources.buildStatusConfig.targetUrl ArrayOfString

Filters access by the API corresponding argument value

codebuild:secondarySources.buildspec Bool

Filters access by the API corresponding argument value

codebuild:secondarySources.insecureSsl ArrayOfBool

Filters access by the API corresponding argument value

codebuild:secondarySources.location ArrayOfString

Filters access by the API corresponding argument value

codebuild:secondarySources.sourceIdentifier ArrayOfString

Filters access by the API corresponding argument value

codebuild:secondarySources/${sourceIdentifier}.auth.resource String

Filters access by the API corresponding argument value

codebuild:secondarySources/${sourceIdentifier}.auth.type String

Filters access by the API corresponding argument value

codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.context String

Filters access by the API corresponding argument value

codebuild:secondarySources/${sourceIdentifier}.buildStatusConfig.targetUrl String

Filters access by the API corresponding argument value

codebuild:secondarySources/${sourceIdentifier}.buildspec Bool

Filters access by the API corresponding argument value

codebuild:secondarySources/${sourceIdentifier}.insecureSsl Bool

Filters access by the API corresponding argument value

codebuild:secondarySources/${sourceIdentifier}.location String

Filters access by the API corresponding argument value

codebuild:serviceRole String

Filters access by the API corresponding argument value

codebuild:source Bool

Filters access by the API corresponding argument value

codebuild:source.auth.resource String

Filters access by the API corresponding argument value

codebuild:source.auth.type String

Filters access by the API corresponding argument value

codebuild:source.buildStatusConfig.context String

Filters access by the API corresponding argument value

codebuild:source.buildStatusConfig.targetUrl String

Filters access by the API corresponding argument value

codebuild:source.buildspec Bool

Filters access by the API corresponding argument value

codebuild:source.insecureSsl Bool

Filters access by the API corresponding argument value

codebuild:source.location String

Filters access by the API corresponding argument value

aws:ResourceTag/${TagKey} String

Filters access by actions based on tag key-value pairs attached to the resource

Example IAM policy

A minimal policy that allows codebuild:StartBuild. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCodebuildStartBuild",
      "Effect": "Allow",
      "Action": "codebuild:StartBuild",
      "Resource": "*"
    }
  ]
}

Related actions in codebuild

codebuild:BatchDeleteBuilds Write codebuild:BatchGetBuildBatches Read codebuild:BatchGetBuilds Read codebuild:BatchGetCommandExecutions Read codebuild:BatchGetFleets Read codebuild:BatchGetProjects Read codebuild:BatchGetReportGroups Read codebuild:BatchGetReports Read codebuild:BatchGetSandboxes Read codebuild:BatchPutCodeCoverages Write codebuild:BatchPutTestCases Write codebuild:CreateFleet Write

View all codebuild actions →