Building PHP Projects on AWS CodeBuild

I've got two tidbits with regard to the Database issue. One is that CodeBuild running within a VPC is "on the roadmap", but as you notice, there's not a 100% obvious way to make this work today without going outside the box a bit. What I did to *temporarily* solve this issue until the VPC support hits is to do dynamic security group modification inside CodeBuild. So, in short, I give the role assigned to the CodeBuild Project the rights to grant and revoke ingress rules on the SG for my RDS instance. In pre-build, I grant it, in post-build I revoke it, and in build I run my DB migrations (I used flyway). The one wrinkle I had to solve wholesale was that since I was doing all this work to support DB migration automation, all the "official" docker images didn't imply aws, so they didn't bake-in awscli. I had to extend the best example I found and added awscli to it, so I could both do the dynamic security group updates as well as have a maintained container implementation of flyway, which I both posted to github and docker hub subsequently (under disturbedkt/flyway-awscli). Since I stood this up with CloudFormation, it looks like so in my yaml Cloud Formation template :

  DBMigrationBuild:
    Type: AWS::CodeBuild::Project
    Properties:
      Artifacts:
        Type: CODEPIPELINE
      Environment:
        ComputeType: BUILD_GENERAL1_SMALL
        Image: disturbedkt/flyway-awscli:latest
        Type: LINUX_CONTAINER
        EnvironmentVariables:
          - Name: DBENDPOINT
            Value: 'dbmigratetest.rzd1kyvqjcl3.us-west-2.rds.amazonaws.com'
          - Name: RDSSECGRP
            Value: 'sg-030d2e7d'
          - Name: S3BUCKET
            Value: !GetAtt CodePipelineDeployBucket.Name
      Name: !Sub ${AWS::StackName}-DBMigrationBuild
      ServiceRole: !Ref DBMigrationBuildRole
      Source:
        Type: CODEPIPELINE
        BuildSpec: |
          version: 0.1

          phases:
            pre_build:
              commands:
                - echo "====DB Migration Process started===="
                - mkdir /tmp/output
                - IP=`curl -s http://checkip.amazonaws.com`/32; echo "Adding temporary rule for $IP to SG $RDSSECGRP";aws ec2 authorize-security-group-ingress --group-id $RDSSECGRP --protocol tcp --port 3306 --cidr $IP --region us-east-1 && echo "Rule added successfully"
            build:
              commands:
                - flyway -url=jdbc:mysql://$DBENDPOINT:3306/DBMigrateTest -schemas=TestDB -locations=filesystem:$CODEBUILD_SRC_DIR/DB_migration_scripts -user=root -password=testpass migrate |tee /tmp/output/dbmigrate.log
            post_build:
              commands:
                - IP=`curl -s http://checkip.amazonaws.com`/32 && echo "Revoking temporary rule for $IP from SG $RDSSECGRP" && aws ec2 revoke-security-group-ingress --group-id $RDSSECGRP --protocol tcp --port 3306 --cidr $IP --region us-east-1 && echo "Rule revoked successfully"
                - aws s3 cp /tmp/output/dbmigrate.log s3://$S3BUCKET/DBMigration.log --acl bucket-owner-read
                - echo "====DB Migration Process completed===="
          artifacts:
            files:
              - /tmp/output/*

What's important to make the above work is the lines which refer to $IP all need to be strung together with &&'s or ;'s, because each individual list item underneath commands is run as it's own execution, so variables and such don't persist in-between lines. Hope this helps with one of your remaining issues.

hi! I came across your tutorial and while investigating I also found out that Alpine Linux images are now supported by AWS CodeBuild - just in case you want to update your https://forums.aws.amazon.c...

Can codebuild be used if you have hosted your PHP app on AWS using Cloudways PaaS? It is basically a platform that provides managed hosting on top of infrastructure, like AWS and others.

Based on this, we're using codebuild now for all our projects, we've ditched Jenkins which was such a temperamental Java app (the last thing you need in your life if you're a PHP coder is a temperamental java app). Codebuild also ends out being cheaper than keeping an instance around to run Jenkins and can handle as many parallel builds as we need rather than queuing them up like Jenkins did.

We've done a series of tutorial blog posts ourselves on using codebuild, setting it up to upload code coverage reports to S3, and ultimately deploying with ssh/sftp, which may be of interest:

https://idealstack.io/blog/...