aws-codebuild-build-log-event
Build commands can echo environment values, credential files, package tokens, and command arguments into durable logs.
Where it sits
| location | CloudWatch Logs/S3 CodeBuild log content |
|---|
| location kind | log_field |
|---|
| data kinds | credential password api_key access_key secret_key private_key source_code_secret |
|---|
| emits edge | ContainsCredential |
|---|
| service | CodeBuild (aws:codebuild) |
|---|
Collection recipe
| access mode | indirect_destination |
|---|
| operation | logs:FilterLogEvents or s3:GetObject |
|---|
| response path | log event message or object body |
|---|
| encoding | string |
|---|
| params | {"Destination": "\u003cbuild-log-destination\u003e"} |
|---|
Required permissions
codebuild:BatchGetBuilds
logs:FilterLogEvents
References