Rule: CodeBuild Project Environment Variables

Rule Description:

Remediation:

Step 1: Review existing CodeBuild project configurations

2. 1.
   Login to the AWS Management Console.
4. 2.
   Go to the AWS CodeBuild service page.
6. 3.
   Select the relevant CodeBuild project where you want to check for clear text credentials.

Step 2: Verify environment variables

2. 1.
   In the project configuration, navigate to the "Environment" section.
4. 2.
   Check the list of environment variables declared for the project.
6. 3.
   For each environment variable, ensure that there are no clear text credentials stored.

Step 3: Replace clear text credentials with secure alternatives

2. 1.
   If any environment variable contains clear text credentials, it is recommended to replace them with secure alternatives.
4. 2.
   Avoid storing credentials directly in environment variables.
6. 3.
   For AWS resources, consider using IAM roles or AWS Secrets Manager to securely manage credentials.

Step 4: Update the CodeBuild project

2. 1.
   After making the necessary changes, update the CodeBuild project configuration.
4. 2.
   Save the changes, and the updated configuration will be applied to the project.

Troubleshooting:

Issue: Clear text credentials found in environment variables

Solution:

2. 1.
   Identify the environment variable(s) containing clear text credentials.
4. 2.
   Follow the remediation steps mentioned above to replace the clear text credentials with secure alternatives.

Issue: Missing permissions to access CodeBuild project configuration

Solution:

2. 1.
   Verify that you have the required permissions to access and modify the CodeBuild project configuration.
4. 2.
   Contact the AWS account administrator if you don't have sufficient permissions.

Best Practices:

2. 1.
   Avoid storing clear text credentials in environment variables.
4. 2.
   Use secure alternatives like IAM roles or AWS Secrets Manager to manage credentials.
6. 3.
   Regularly review and monitor your CodeBuild projects for any potential security risks.
8. 4.
   Implement proper access control to limit who can modify the CodeBuild project configuration.
10. 5.
    Stay up-to-date with AWS security best practices and recommendations.