Amazon CodeArtifact
Amazon CodeArtifact is a fully managed, secure artifact repository service that helps organizations store, publish, and share software packages used in their software development process. CodeArtifact works with popular build tools and package managers including npm, yarn, pip, twine, Maven, Gradle, NuGet, and more. It supports Cargo, generic, Maven, npm, NuGet, PyPI, Ruby, and Swift package formats and integrates natively with AWS IAM, AWS KMS, AWS CloudTrail, and Amazon EventBridge.
APIs
Amazon CodeArtifact API
The Amazon CodeArtifact REST API enables programmatic management of artifact repositories, domains, packages, and package versions. Manage domains and repositories, control perm...
Capabilities
Amazon CodeArtifact Package Management
Unified workflow for DevOps teams to manage artifact repositories, publish packages, control access, and govern software supply chains using Amazon CodeArtifact.
Run with NaftikoFeatures
Supports Cargo, generic, Maven, npm, NuGet, PyPI, Ruby, and Swift package formats in polyglot repositories that can hold any supported package type in a single repository.
Connect repositories to public sources including npmjs, PyPI, Maven Central, NuGet Gallery, and RubyGems.org to proxy and cache open-source dependencies on demand.
Aggregate multiple repositories into a domain to apply organizational policies, manage encryption, and share packages across development teams.
Create upstream relationships between repositories so downstream repositories can transparently access packages from upstream sources, effectively merging their contents.
Apply configuration to multiple packages using package groups with pattern matching. Use origin controls to block or allow ingestion or publishing of new package versions against dependency substitution attacks.
Generate temporary authorization tokens (up to 12 hours) for secure authentication with package managers without long-lived credentials.
Control access to domains and repositories using AWS Identity and Access Management for fine-grained permissions policies.
All assets and metadata in a domain are encrypted with the same AWS KMS key, supporting both AWS managed and customer managed keys.
Track package usage and access across your organization with full audit logging via AWS CloudTrail.
Automate package governance workflows and trigger actions on package events using Amazon EventBridge.
Access CodeArtifact repositories from within a VPC without exposing traffic to the public internet using AWS PrivateLink endpoints.
Multi-Availability Zone operation with redundant package asset storage across Amazon S3 and DynamoDB, fully managed with automatic scaling.
Use Cases
Share proprietary software components and internal libraries between multiple applications and development teams within an organization without managing your own artifact storage infrastructure.
Proxy and cache open-source packages from public registries to ensure build reproducibility and availability even when upstream registries experience downtime.
Control which packages developers can use with package origin controls to protect against dependency confusion and substitution attacks.
Apply organizational policies across multiple repositories in a domain and audit package consumption across development teams using CloudTrail and EventBridge.
Integrate with CI/CD systems using native package manager support (npm, Maven, pip, NuGet) to fetch and publish packages as part of automated build and release workflows.
Integrations
Fine-grained access control for domains, repositories, and package operations.
Encryption key management for all package assets and metadata stored in a domain.
Audit logging for all CodeArtifact API calls and package access events.
Event-driven automation for package governance workflows and notifications.
Private network connectivity to CodeArtifact from within a VPC.
Public upstream connection for npm package proxying and caching.
Public upstream connection for Python package proxying and caching.
Public upstream connection for Java/Maven package proxying and caching.
Public upstream connection for .NET package proxying and caching.
Public upstream connection for Ruby gem proxying and caching.
Public upstream connection for Rust/Cargo package proxying and caching.
Integrate CodeArtifact with GitHub Actions CI/CD workflows for package management.
Use CodeArtifact as the package source in AWS CodeBuild build projects.
Incorporate package publishing and consumption into AWS CodePipeline deployment pipelines.