Skip to content

Tighten CodeDeploy config file permissions#10206

Merged
AndrewAsseily merged 1 commit intoaws:developfrom
aahallal:fix-codedeploy-config-file-permissions-v1
Apr 10, 2026
Merged

Tighten CodeDeploy config file permissions#10206
AndrewAsseily merged 1 commit intoaws:developfrom
aahallal:fix-codedeploy-config-file-permissions-v1

Conversation

@aahallal
Copy link
Copy Markdown
Contributor

@aahallal aahallal commented Apr 9, 2026

Changed the CodeDeploy on-premises instance configuration file creation to use os.open() with explicit permissions (0o600) instead of the default open() function. This ensures the configuration file is created with owner-only read/write permissions, improving security by preventing other users on the system from accessing potentially sensitive configuration data.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Apr 9, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.43%. Comparing base (c4681b5) to head (81e598b).
⚠️ Report is 261 commits behind head on develop.

Additional details and impacted files
@@             Coverage Diff             @@
##           develop   #10206      +/-   ##
===========================================
+ Coverage    93.39%   93.43%   +0.04%     
===========================================
  Files          210      210              
  Lines        17052    17241     +189     
===========================================
+ Hits         15925    16109     +184     
- Misses        1127     1132       +5     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@aahallal aahallal force-pushed the fix-codedeploy-config-file-permissions-v1 branch from fbaca99 to 81e598b Compare April 9, 2026 18:15
Copy link
Copy Markdown
Contributor

@AndrewAsseily AndrewAsseily left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! 🏆

@AndrewAsseily AndrewAsseily merged commit 84f0ec6 into aws:develop Apr 10, 2026
49 checks passed
@AndrewAsseily AndrewAsseily changed the title Change CodeDeploy config file permissions to owner only Tighten CodeDeploy config file permissions Apr 10, 2026
aws-sdk-python-automation added a commit that referenced this pull request Apr 10, 2026
* release-1.44.78:
  Bumping version to 1.44.78
  Update changelog based on model updates
  Revert "Tighten output file permissions (#10197)" (#10214)
  Tighten CodeDeploy config file permissions (#10206)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants