Description:
This policy ensures that all Code Build Projects are in use. This helps to ensure that your CodeBuild resources are being utilized effectively.
Rationale:
CodeBuild Projects that are not in use can waste resources and cost money. By ensuring that all CodeBuild Projects are in use, you can help to reduce your AWS costs.
Impact:
If you do not ensure that all CodeBuild Projects are in use, you may be wasting resources and incurring unnecessary costs.
Default Value:
By default, CodeBuild Projects are not in use until they are triggered.
Pre-requisites:
- You must have an AWS account and be an IAM user with the appropriate permissions to view and manage CodeBuild Projects.
Remediation Steps:
- Identify all CodeBuild Projects that are not in use.
- Determine the reason why the projects are not in use.
- Take action to put the projects into use, or delete them if they are no longer needed.
Test Plan:
- Identify a subset of CodeBuild Projects that are not in use.
- Determine the reason why the projects are not in use.
- Take action to put the projects into use, or delete them if they are no longer needed.
- Verify that the projects are in use or deleted, as appropriate.
Implementation Plan:
AWS CLI:
aws codebuild list-projects
AWS GUI:
- Go to the CodeBuild console.
- Click Projects.
Backout Plan:
- Restore the CodeBuild Projects that were deleted.
- Re-enable the CodeBuild Projects that were not in use.
Note:
- This policy applies to all regions and accounts.
- You can use the AWS CLI or the AWS SDKs to automate the process of identifying and remediating unused CodeBuild Projects.
Reference:
https://docs.aws.amazon.com/codebuild/latest/userguide/concepts.html