Code Pipeline Integrations

Table of Contents

• Introduction
• Deployment Architecture
• Identified Places for Chains of Custody
• Development Environment, including Git
• AWS Code Build + Dockerfile + Artifact
• AWS Code Deploy Artifact
• Docker Layer Hashes + ECR
• End to End Workflow Logs
• AWS Configuration during Deploy
• DB/Data Transactions
• Production Logs

CodePipeline for Cloud - Introduction

We support CLI and API integration options for end-end DevSecOps pipelines.

Deployment Architecture

A common deployment sample, where the Chainkit CLI can be added to register and verify each step to form links in a Chain of Custody:

Identified Places for Chains of Custody

Here are the identified places for Chains of Custody:

Development Environment, including Git Hashes

AWS Code Build + Dockerfile + Artifact

AWS Code Deploy Artifact

Docker Layer Hashes + ECR

End to End Workflow Logs

AWS Configuration during Deploy

DB/Data Transactions

Production Logs