CodeCommit

Overview

Firefly integrates with AWS CodeCommit to connect your infrastructure code repositories with your cloud resources. This integration enables powerful features like tracing cloud resources back to their defining code ("Jump to Code") and automatically creating Pull Requests for newly codified resources and drift remediation.

Prerequisites

• An AWS account with access to your infrastructure repositories in CodeCommit

• Appropriate permissions to create IAM roles and CloudFormation stacks

• Repositories containing Terraform, CloudFormation, or other IaC files you want to connect to Firefly

Setup Procedure

1. Log in to your AWS account with permission to create CloudFormation and IAM AWS resources

2. Copy your AWS account ID (located at the top right corner of the AWS console) to the clipboard

3. In Firefly, select Settings > Integrations

4. Select Add New > AWS CodeCommit

5. Enter a descriptive name in the Nickname field

6. Paste the AWS account ID

7. Select Launch Stack

Features Enabled

• Jump to Code: Trace resources in your cloud inventory back to the CodeCommit file and specific line that defines them

• Automated Pull Requests: When Firefly codifies an unmanaged resource, it can commit the new infrastructure code as a Pull Request

• IaC Tracking: Firefly maintains awareness of which resources are defined in code and which are not

• Drift Remediation: Firefly can detect drift between the code and the actual resources and create a Pull Request to fix it

Best Practices

• Ensure the IAM role has appropriate permissions to access your CodeCommit repositories

• Regularly review Pull Requests created by Firefly

• Consider organizing your repositories to make it easier to manage access

Troubleshooting

1. For authentication issues:

   • Verify AWS credentials and IAM role permissions

   • Check if the IAM role has been properly created and has the necessary policies

   • Ensure the CloudFormation stack was deployed successfully

2. For repository access issues:

   • Verify the integration has access to the required repositories

   • Check IAM permissions if applicable

   • Review Firefly integration logs