pipeline.json

{
    "AWSTemplateFormatVersion": "2010-09-09",
    "Description": "CloudFormation template uses CodePipeline and CodeBuild for continuous delivery of a single-page application to S3",
    "Parameters": {
        "SiteBucketName": {
            "Type": "String",
            "Default": "static-website-cloudformation-bucket",
            "Description": "Name of bucket to create to host the website."
        },
        "GitHubUser": {
            "Type": "String",
            "Default": "nditech",
            "Description": "GitHub Username."
        },
        "GitHubRepo": {
            "Type": "String",
            "Default": "tech-staticsite-cicd",
            "Description": "GitHub Repo to pull from. Only the Name, not the URL."
        },
        "GitHubBranch": {
            "Type": "String",
            "Default": "master",
            "Description": "GitHub Branch."
        },
        "GitHubToken": {
            "NoEcho": true,
            "Type": "String",
            "Default": "{{resolve:ssm:staticSiteCICDGitHubToken:1}}",
            "Description": "GitHub Token stored in AWS Systems Manager Parameter Store."
        },
        "BuildType": {
            "Type": "String",
            "Default": "LINUX_CONTAINER",
            "Description": "The build container type to use for building the app."
        },
        "BuildComputeType": {
            "Type": "String",
            "Default": "BUILD_GENERAL1_SMALL",
            "Description": "The build compute type to use for building the app."
        },
        "BuildImage": {
            "Type": "String",
            "Default": "aws/codebuild/ubuntu-base:14.04",
            "Description": "The build image to use for building the app."
        }
    },
    "Metadata": {
        "AWS::CloudFormation::Interface": {
            "ParameterGroups": [
                {
                    "Label": {
                        "default": "Site Configuration"
                    },
                    "Parameters": [
                        "SiteBucketName"
                    ]
                },
                {
                    "Label": {
                        "default": "GitHub Configuration"
                    },
                    "Parameters": [
                        "GitHubToken",
                        "GitHubUser",
                        "GitHubRepo",
                        "GitHubBranch"
                    ]
                },
                {
                    "Label": {
                        "default": "Build Configuration"
                    },
                    "Parameters": [
                        "BuildType",
                        "BuildComputeType",
                        "BuildImage"
                    ]
                }
            ],
            "ParameterLabels": {
                "SiteBucketName": {
                    "default": "Name of S3 Bucket to create for website hosting"
                },
                "GitHubToken": {
                    "default": "GitHub OAuth2 Token"
                },
                "GitHubUser": {
                    "default": "GitHub User/Org Name"
                },
                "GitHubRepo": {
                    "default": "GitHub Repository Name"
                },
                "GitHubBranch": {
                    "default": "GitHub Branch Name"
                },
                "BuildType": {
                    "default": "CodeBuild type"
                },
                "BuildComputeType": {
                    "default": "CodeBuild instance type"
                },
                "BuildImage": {
                    "default": "CodeBuild image"
                }
            }
        }
    },
    "Resources": {
        "CodeBuildRole": {
            "Type": "AWS::IAM::Role",
            "Properties": {
                "AssumeRolePolicyDocument": {
                    "Statement": [
                        {
                            "Effect": "Allow",
                            "Principal": {
                                "Service": [
                                    "codebuild.amazonaws.com"
                                ]
                            },
                            "Action": [
                                "sts:AssumeRole"
                            ]
                        }
                    ]
                },
                "Path": "/",
                "Policies": [
                    {
                        "PolicyName": {
                            "Fn::Sub": "${AWS::StackName}-codepipeline-policy"
                        },
                        "PolicyDocument": {
                            "Statement": [
                                {
                                    "Effect": "Allow",
                                    "Action": "*",
                                    "Resource": "*"
                                }
                            ],
                            "Version": "2012-10-17"
                        }
                    }
                ]
            }
        },
        "CodePipelineRole": {
            "Type": "AWS::IAM::Role",
            "Properties": {
                "AssumeRolePolicyDocument": {
                    "Statement": [
                        {
                            "Effect": "Allow",
                            "Principal": {
                                "Service": [
                                    "codepipeline.amazonaws.com"
                                ]
                            },
                            "Action": [
                                "sts:AssumeRole"
                            ]
                        }
                    ]
                },
                "Path": "/",
                "Policies": [
                    {
                        "PolicyName": {
                            "Fn::Sub": "${AWS::StackName}-codepipeline-policy"
                        },
                        "PolicyDocument": {
                            "Statement": [
                                {
                                    "Action": [
                                        "codebuild:*"
                                    ],
                                    "Resource": "*",
                                    "Effect": "Allow"
                                },
                                {
                                    "Action": [
                                        "s3:GetObject",
                                        "s3:GetObjectVersion",
                                        "s3:GetBucketVersioning"
                                    ],
                                    "Resource": "*",
                                    "Effect": "Allow"
                                },
                                {
                                    "Action": [
                                        "s3:PutObject"
                                    ],
                                    "Resource": [
                                        "arn:aws:s3:::codepipeline*"
                                    ],
                                    "Effect": "Allow"
                                },
                                {
                                    "Action": [
                                        "s3:*",
                                        "cloudformation:*",
                                        "iam:PassRole"
                                    ],
                                    "Resource": "*",
                                    "Effect": "Allow"
                                }
                            ],
                            "Version": "2012-10-17"
                        }
                    }
                ]
            }
        },
        "SiteBucket": {
            "Type": "AWS::S3::Bucket",
            "DeletionPolicy": "Delete",
            "Properties": {
                "AccessControl": "PublicRead",
                "BucketName": {
                    "Ref": "SiteBucketName"
                },
                "WebsiteConfiguration": {
                    "IndexDocument": "index.html",
                    "ErrorDocument": "error.html"
                }
            }
        },
        "BucketPolicy": {
            "Type": "AWS::S3::BucketPolicy",
            "Properties": {
                "PolicyDocument": {
                    "Version": "2012-10-17",
                    "Statement": [
                        {
                            "Sid": "PublicReadForGetBucketObjects",
                            "Effect": "Allow",
                            "Principal": "*",
                            "Action": "s3:GetObject",
                            "Resource": {
                                "Fn::Join": [
                                    "",
                                    [
                                        "arn:aws:s3:::",
                                        {
                                            "Ref": "SiteBucket"
                                        },
                                        "/*"
                                    ]
                                ]
                            }
                        }
                    ]
                },
                "Bucket": {
                    "Ref": "SiteBucket"
                }
            }
        },
        "PipelineBucket": {
            "Type": "AWS::S3::Bucket",
            "DeletionPolicy": "Delete"
        },
        "CodeBuildDeploySite": {
            "Type": "AWS::CodeBuild::Project",
            "DependsOn": "CodeBuildRole",
            "Properties": {
                "Name": {
                    "Fn::Sub": "${AWS::StackName}-codebuild-project"
                },
                "Description": "Deploy site to S3",
                "ServiceRole": {
                    "Fn::GetAtt": [
                        "CodeBuildRole",
                        "Arn"
                    ]
                },
                "Artifacts": {
                    "Type": "CODEPIPELINE"
                },
                "Environment": {
                    "Type": {
                        "Ref": "BuildType"
                    },
                    "ComputeType": {
                        "Ref": "BuildComputeType"
                    },
                    "Image": {
                        "Fn::Sub": "${BuildImage}"
                    }
                },
                "Source": {
                    "Type": "CODEPIPELINE",
                    "BuildSpec": {
                        "Fn::Sub": "version: 0.2\nphases:\n  pre_build:\n    commands:\n      - aws s3 rm s3://${SiteBucketName} --recursive \n  build:\n    commands:\n      - mkdir build-output \n      - find . -type d -name public -exec cp -R {} build-output \\; \n      - find . -mindepth 1 -name build-output -prune -o -exec rm -rf {} + \n  post_build:\n    commands:\n      - mv build-output/**/* ./ \n      - mv build-output/* ./ \n      - rm -R build-output \nartifacts:\n  files:\n    - '**/*'\n  name: $(AWS_REGION)-$(date +%Y-%m-%d) \n"
                    }
                },
                "TimeoutInMinutes": 10
            }
        },
        "Pipeline": {
            "Type": "AWS::CodePipeline::Pipeline",
            "Properties": {
                "RoleArn": {
                    "Fn::GetAtt": [
                        "CodePipelineRole",
                        "Arn"
                    ]
                },
                "Stages": [
                    {
                        "Name": "Source",
                        "Actions": [
                            {
                                "InputArtifacts": [],
                                "Name": "Source",
                                "ActionTypeId": {
                                    "Category": "Source",
                                    "Owner": "ThirdParty",
                                    "Version": "1",
                                    "Provider": "GitHub"
                                },
                                "OutputArtifacts": [
                                    {
                                        "Name": "SourceArtifacts"
                                    }
                                ],
                                "Configuration": {
                                    "Owner": {
                                        "Ref": "GitHubUser"
                                    },
                                    "Repo": {
                                        "Ref": "GitHubRepo"
                                    },
                                    "Branch": {
                                        "Ref": "GitHubBranch"
                                    },
                                    "OAuthToken": {
                                        "Ref": "GitHubToken"
                                    }
                                },
                                "RunOrder": 1
                            }
                        ]
                    },
                    {
                        "Name": "Build",
                        "Actions": [
                            {
                                "InputArtifacts": [
                                    {
                                        "Name": "SourceArtifacts"
                                    }
                                ],
                                "Name": "Build",
                                "ActionTypeId": {
                                    "Category": "Build",
                                    "Owner": "AWS",
                                    "Version": "1",
                                    "Provider": "CodeBuild"
                                },
                                "OutputArtifacts": [
                                    {
                                        "Name": "OutputArtifacts"
                                    }
                                ],
                                "Configuration": {
                                    "ProjectName": {
                                        "Ref": "CodeBuildDeploySite"
                                    }
                                },
                                "RunOrder": 1
                            }
                        ]
                    },
                    {
                        "Name": "Deploy",
                        "Actions": [
                            {
                                "Name": "Deploy",
                                "ActionTypeId": {
                                    "Category": "Deploy",
                                    "Owner": "AWS",
                                    "Version": "1",
                                    "Provider": "S3"
                                },
                                "InputArtifacts": [
                                    {
                                        "Name": "OutputArtifacts"
                                    }
                                ],
                                "Configuration": {
                                    "BucketName": {
                                        "Ref": "SiteBucket"
                                    },
                                    "Extract": true
                                },
                                "RunOrder": 1
                            }
                        ]
                    }
                ],
                "ArtifactStore": {
                    "Type": "S3",
                    "Location": {
                        "Ref": "PipelineBucket"
                    }
                }
            }
        }
    },
    "Outputs": {
        "PipelineUrl": {
            "Value": {
                "Fn::Sub": "https://console.aws.amazon.com/codepipeline/home?region=${AWS::Region}#/view/${Pipeline}"
            },
            "Description": "CodePipeline URL"
        },
        "SiteUrl": {
            "Value": {
                "Fn::GetAtt": [
                    "SiteBucket",
                    "WebsiteURL"
                ]
            },
            "Description": "S3 Website URL"
        }
    }
}