Codeship 自动部署 - AWS 配置

今天基本理清了CodeShip和CodeDeploy的用法。

`CodeDeploy`部分

IAM

1. 首先先创建一个用户来管理后续的操作

在IAM的用户中(USER)创建一个用户，暂时我就把它命名为codeship。该用户是给Codeship做部署用的。


codeship

Access Key ID:      AK**********ICQ

Secret Access Key:  Ze*******crCpZt

2. 在写一点基本的策略分配权限

在IAM中创建三个策略(Proliies)

EC2

创建策略
创建您自己的策略
修改策略名称 ec2
修改策略文档表示 EC2可以查看和读取所有S3的权限


{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Action": [
               "s3:Get*",
               "s3:List*"
           ],
           "Effect": "Allow",
           "Resource": "*"
       }
   ]

}

Codedeploy

创建策略
创建您自己的策略
修改策略名称 codedeploy
修改策略文档表示 EC2有autoscaling的权限


{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Action": [
               "autoscaling:PutLifecycleHook",
               "autoscaling:DeleteLifecycleHook",
               "autoscaling:RecordLifecycleActionHeartbeat",
               "autoscaling:CompleteLifecycleAction",
               "autoscaling:DescribeAutoscalingGroups",
               "autoscaling:PutInstanceInStandby",
               "autoscaling:PutInstanceInService",
               "ec2:Describe*"
           ],
           "Effect": "Allow",
           "Resource": "*"
       }
   ]

}

```    

`S3`

1. 创建策略

2. 创建您自己的策略

3. 修改 策略名称 `s3`

4. 修改 策略文档 表示 用户 可以上传文件到`YOUR_S3_BUCKET_NAME/*`的权限,`bucketname/folder`自行替换

{
“Version”: “2012-10-17”,
“Statement”: [
{
“Effect”: “Allow”,
“Action”: [
“s3:PutObject”
],
“Resource”: [
“arn:aws:s3::: YOUR_S3_BUCKET_NAME/*”
]
}
]

}


`deploy`

1. 创建策略

2. 创建您自己的策略

3. 修改 策略名称 `deploy `

4. 修改 策略文档 表示 用户部署的权限`ec2`的权限， 自行替换`YOUR_AWS_REGION`,`YOUR_AWS_ACCOUNT_ID`,`CODE_DEPLOY_APPLICATION_NAME`

```  

{
   "Version": "2012-10-17",
   "Statement": [     
       {
           "Effect": "Allow",
           "Action": [
               "codedeploy:RegisterApplicationRevision",
               "codedeploy:GetApplicationRevision"
           ],
           "Resource": [
               "arn:aws:codedeploy:YOUR_AWS_REGION:YOUR_AWS_ACCOUNT_ID:application:CODE_DEPLOY_APPLICATION_NAME"
           ]
       },
       {
           "Effect": "Allow",
           "Action": [
               "codedeploy:CreateDeployment",
               "codedeploy:GetDeployment"
           ],
           "Resource": [
               "arn:aws:codedeploy:YOUR_AWS_REGION:YOUR_AWS_ACCOUNT_ID:deploymentgroup:CODE_DEPLOY_APPLICATION_NAME/*"
           ]
       },
       {
           "Effect": "Allow",
           "Action": [
               "codedeploy:GetDeploymentConfig"
           ],
           "Resource": [
               "arn:aws:codedeploy:YOUR_AWS_REGION:YOUR_AWS_ACCOUNT_ID:deploymentconfig:CodeDeployDefault.OneAtATime",
               "arn:aws:codedeploy:YOUR_AWS_REGION:YOUR_AWS_ACCOUNT_ID:deploymentconfig:CodeDeployDefault.HalfAtATime",
               "arn:aws:codedeploy:YOUR_AWS_REGION:YOUR_AWS_ACCOUNT_ID:deploymentconfig:CodeDeployDefault.AllAtOnce"
           ]
       }
   ]

}