A company is migrating from its on-premises data center to AWS. The company currently uses a custom on-premises CI/CD pipeline solution to build and…

Create an AWS Identity and Access Management Roles Anywhere trust anchor Create an IAM role

that allows CodeArtifact actions and that has a trust relationship on the trust anchor. Update the on-

premises CI/CD pipeline to assume the new IAM role and to publish the packages to CodeArtifact:

Roles Anywhere allows on-premises servers to assume IAM roles, making it easier to integrate on-

premises environments with AWS services.

Steps:

Create a trust anchor in IAM.

Create an IAM role with permissions for CodeArtifact actions (e.g., publishing packages).

Update the CI/CD pipeline to assume this role using the trust anchor.

Create a new Amazon S3 bucket. Generate a presigned URL that allows the PutObject request.

Update the on-premises CI/CD pipeline to use the presigned URL to publish the packages from the

on-premises location to the S3 bucket. Create an AWS Lambda function that runs when packages are

created in the bucket through a put command Configure the Lambda function to publish the

packages to CodeArtifact:

Using an S3 bucket as an intermediary, you can easily upload packages from on-premises systems.

Steps:

Create an S3 bucket.

Generate presigned URLs to allow the CI/CD pipeline to upload packages.

Configure an AWS Lambda function to trigger on S3 PUT events and publish the packages to

CodeArtifact.

Reference:

IAM Roles Anywhere

Amazon S3 presigned URLs

AWS Lambda function triggers