为 AWS CodeCommit 生成 HTTPS Git 凭证：AWS 编程访问

Question

Question. I want to restrict some AWS CodeCommit user's AWS console access. If I give them "AWS Programmatic access", how can they generate Git the password to use AWS CodeCommit? How can I achieve this by not giving them AWS console access?

Answer 1

The steps to achieve your requirement:

1. Create an IAM User with access key ID and a secret access key (No need to provide these secrets to your users)
2. Attach 'AWSCodeCommitFullAccess' permission to this IAM User
3. Create Git Username and Password in AWS IAM Console. This is your secret sauce to access CodeCommit
4. Provide your users with Repo clone URL (HTTPS) and their Git username and password (created in Step-3)

These steps are presented here in elaborate details: https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-gc.html