amazonaws.com – codeartifact
CodeArtifact is a fully managed artifact repository compatible with language-native package managers and build tools such as npm, Apache Maven, pip, and dotnet. You can use CodeArtifact to share packages with development teams and pull packages. Packages can be pulled from both public and CodeArtifact repositories. You can also create an upstream relationship between a CodeArtifact repository and another repository, which effectively merges their contents from the point of view of a package manager client.
CodeArtifact Components
Use the information in this guide to help you work with the following CodeArtifact components:
-
Repository: A CodeArtifact repository contains a set of , each of which maps to a set of assets, or files. Repositories are polyglot, so a single repository can contain packages of any supported type. Each repository exposes endpoints for fetching and publishing packages using tools like the
npmCLI, the Maven CLI (mvn), Python CLIs (pipandtwine), and NuGet CLIs (nugetanddotnet). -
Domain: Repositories are aggregated into a higher-level entity known as a domain. All package assets and metadata are stored in the domain, but are consumed through repositories. A given package asset, such as a Maven JAR file, is stored once per domain, no matter how many repositories it's present in. All of the assets and metadata in a domain are encrypted with the same customer master key (CMK) stored in Key Management Service (KMS).
Each repository is a member of a single domain and can't be moved to a different domain.
The domain allows organizational policy to be applied across multiple repositories, such as which accounts can access repositories in the domain, and which public repositories can be used as sources of packages.
Although an organization can have multiple domains, we recommend a single production domain that contains all published artifacts so that teams can find and share packages across their organization.
-
Package: A package is a bundle of software and the metadata required to resolve dependencies and install the software. CodeArtifact supports , , , and package formats.
In CodeArtifact, a package consists of:
-
A name (for example,
webpackis the name of a popular npm package) -
An optional namespace (for example,
@typesin@types/node) -
A set of versions (for example,
1.0.0,1.0.1,1.0.2, etc.) -
Package-level metadata (for example, npm tags)
-
-
Package version: A version of a package, such as
@types/node 12.6.9. The version number format and semantics vary for different package formats. For example, npm package versions must conform to the . In CodeArtifact, a package version consists of the version identifier, metadata at the package version level, and a set of assets. -
Upstream repository: One repository is upstream of another when the package versions in it can be accessed from the repository endpoint of the downstream repository, effectively merging the contents of the two repositories from the point of view of a client. CodeArtifact allows creating an upstream relationship between two repositories.
-
Asset: An individual file stored in CodeArtifact associated with a package version, such as an npm
.tgzfile or Maven POM and JAR files.
CodeArtifact supports these operations:
-
AssociateExternalConnection: Adds an existing external connection to a repository. -
CopyPackageVersions: Copies package versions from one repository to another repository in the same domain. -
CreateDomain: Creates a domain -
CreateRepository: Creates a CodeArtifact repository in a domain. -
DeleteDomain: Deletes a domain. You cannot delete a domain that contains repositories. -
DeleteDomainPermissionsPolicy: Deletes the resource policy that is set on a domain. -
DeletePackage: Deletes a package and all associated package versions. -
DeletePackageVersions: Deletes versions of a package. After a package has been deleted, it can be republished, but its assets and metadata cannot be restored because they have been permanently removed from storage. -
DeleteRepository: Deletes a repository. -
DeleteRepositoryPermissionsPolicy: Deletes the resource policy that is set on a repository. -
DescribeDomain: Returns aDomainDescriptionobject that contains information about the requested domain. -
DescribePackage: Returns a object that contains details about a package. -
DescribePackageVersion: Returns a object that contains details about a package version. -
DescribeRepository: Returns aRepositoryDescriptionobject that contains detailed information about the requested repository. -
DisposePackageVersions: Disposes versions of a package. A package version with the statusDisposedcannot be restored because they have been permanently removed from storage. -
DisassociateExternalConnection: Removes an existing external connection from a repository. -
GetAuthorizationToken: Generates a temporary authorization token for accessing repositories in the domain. The token expires the authorization period has passed. The default authorization period is 12 hours and can be customized to any length with a maximum of 12 hours. -
GetDomainPermissionsPolicy: Returns the policy of a resource that is attached to the specified domain. -
GetPackageVersionAsset: Returns the contents of an asset that is in a package version. -
GetPackageVersionReadme: Gets the readme file or descriptive text for a package version. -
GetRepositoryEndpoint: Returns the endpoint of a repository for a specific package format. A repository has one endpoint for each package format:-
maven -
npm -
nuget -
pypi
-
-
GetRepositoryPermissionsPolicy: Returns the resource policy that is set on a repository. -
ListDomains: Returns a list ofDomainSummaryobjects. Each returnedDomainSummaryobject contains information about a domain. -
ListPackages: Lists the packages in a repository. -
ListPackageVersionAssets: Lists the assets for a given package version. -
ListPackageVersionDependencies: Returns a list of the direct dependencies for a package version. -
ListPackageVersions: Returns a list of package versions for a specified package in a repository. -
ListRepositories: Returns a list of repositories owned by the Amazon Web Services account that called this method. -
ListRepositoriesInDomain: Returns a list of the repositories in a domain. -
PublishPackageVersion: Creates a new package version containing one or more assets. -
PutDomainPermissionsPolicy: Attaches a resource policy to a domain. -
PutPackageOriginConfiguration: Sets the package origin configuration for a package, which determine how new versions of the package can be added to a specific repository. -
PutRepositoryPermissionsPolicy: Sets the resource policy on a repository that specifies permissions to access it. -
UpdatePackageVersionsStatus: Updates the status of one or more versions of a package. -
UpdateRepository: Updates the properties of a repository.
- Homepage
- https://api.apis.guru/v2/specs/amazonaws.com:codeartifact/2018-09-22.json
- Provider
- amazonaws.com:codeartifact / codeartifact
- OpenAPI version
- 3.0.0
- Spec (JSON)
- https://api.apis.guru/v2/specs/amazonaws.com/codeartifact/2018-09-22/openapi.json
- Spec (YAML)
- https://api.apis.guru/v2/specs/amazonaws.com/codeartifact/2018-09-22/openapi.yaml
Tools (40)
Extracted live via the executor SDK.
-
authorizationTokenDomain.getAuthorizationTokenGenerates a temporary authorization token for accessing repositories in the domain. This API requires the
codeartifact:GetAuthorizationTokenandsts:GetServiceBearerTokenpermissions. For more information about authorization tokens, see .CodeArtifact authorization tokens are valid for a period of 12 hours when created with the
logincommand. You can callloginperiodically to refresh the token. When you create an authorization token with theGetAuthorizationTokenAPI, you can set a custom authorization period, up to a maximum of 12 hours, with thedurationSecondsparameter.The authorization period begins after
loginorGetAuthorizationTokenis called. IfloginorGetAuthorizationTokenis called while assuming a role, the token lifetime is independent of the maximum session duration of the role. For example, if you callsts assume-roleand specify a session duration of 15 minutes, then generate a CodeArtifact authorization token, the token will be valid for the full authorization period even though this is longer than the 15-minute session duration.See for more information on controlling session duration.
-
domain.deleteDomainPermissionsPolicyDeletes the resource policy set on a domain.
-
domain.getDomainPermissionsPolicyReturns the resource policy attached to the specified domain.
The policy is a resource-based policy, not an identity-based policy. For more information, see in the IAM User Guide.
-
domain.listRepositoriesInDomainReturns a list of objects. Each
RepositorySummarycontains information about a repository in the specified domain and that matches the input parameters. -
domain.putDomainPermissionsPolicySets a resource policy on a domain that specifies permissions to access it.
When you call
PutDomainPermissionsPolicy, the resource policy on the domain is ignored when evaluting permissions. This ensures that the owner of a domain cannot lock themselves out of the domain, which would prevent them from being able to update the resource policy. -
domainDomain.createDomainCreates a domain. CodeArtifact domains make it easier to manage multiple repositories across an organization. You can use a domain to apply permissions across many repositories owned by different Amazon Web Services accounts. An asset is stored only once in a domain, even if it's in multiple repositories.
Although you can have multiple domains, we recommend a single production domain that contains all published artifacts so that your development teams can find and share packages. You can use a second pre-production domain to test changes to the production domain configuration.
-
domainDomain.deleteDomainDeletes a domain. You cannot delete a domain that contains repositories. If you want to delete a domain with repositories, first delete its repositories.
-
domainDomain.describeDomainReturns a object that contains information about the requested domain.
-
domains.listDomainsReturns a list of objects for all domains owned by the Amazon Web Services account that makes this call. Each returned
DomainSummaryobject contains information about a domain. -
package.copyPackageVersionsCopies package versions from one repository to another repository in the same domain.
You must specify
versionsorversionRevisions. You cannot specify both. -
package.deletePackageVersionsDeletes one or more versions of a package. A deleted package version cannot be restored in your repository. If you want to remove a package version from your repository and be able to restore it later, set its status to
Archived. Archived packages cannot be downloaded from a repository and don't show up with list package APIs (for example, ), but you can restore them using . -
package.describePackageVersionReturns a object that contains information about the requested package version.
-
package.disposePackageVersionsDeletes the assets in package versions and sets the package versions' status to
Disposed. A disposed package version cannot be restored in your repository because its assets are deleted.To view all disposed package versions in a repository, use and set the parameter to
Disposed.To view information about a disposed package version, use .
-
package.getPackageVersionAssetReturns an asset (or file) that is in a package. For example, for a Maven package version, use
GetPackageVersionAssetto download aJARfile, aPOMfile, or any other assets in the package version. -
package.getPackageVersionReadmeGets the readme file or descriptive text for a package version.
The returned text might contain formatting. For example, it might contain formatting for Markdown or reStructuredText.
-
package.listPackageVersionAssetsReturns a list of objects for assets in a package version.
-
package.listPackageVersionDependenciesReturns the direct dependencies for a package version. The dependencies are returned as objects. CodeArtifact extracts the dependencies for a package version from the metadata file for the package format (for example, the
package.jsonfile for npm packages and thepom.xmlfile for Maven). Any package version dependencies that are not listed in the configuration file are not returned. -
package.listPackageVersionsReturns a list of objects for package versions in a repository that match the request parameters. Package versions of all statuses will be returned by default when calling
list-package-versionswith no--statusparameter. -
package.publishPackageVersionCreates a new package version containing one or more assets (or files).
The
unfinishedflag can be used to keep the package version in theUnfinishedstate until all of its assets have been uploaded (see in the CodeArtifact user guide). To set the package version’s status toPublished, omit theunfinishedflag when uploading the final asset, or set the status using . Once a package version’s status is set toPublished, it cannot change back toUnfinished.Only generic packages can be published using this API. For more information, see in the CodeArtifact User Guide.
-
package.updatePackageVersionsStatusUpdates the status of one or more versions of a package. Using
UpdatePackageVersionsStatus, you can update the status of package versions toArchived,Published, orUnlisted. To set the status of a package version toDisposed, use . -
packageDomainRepositoryFormatPackage.deletePackageDeletes a package and all associated package versions. A deleted package cannot be restored. To delete one or more package versions, use the API.
-
packageDomainRepositoryFormatPackage.describePackageReturns a object that contains information about the requested package.
-
packageDomainRepositoryFormatPackage.putPackageOriginConfigurationSets the package origin configuration for a package.
The package origin configuration determines how new versions of a package can be added to a repository. You can allow or block direct publishing of new package versions, or ingestion and retaining of new package versions from an external connection or upstream source. For more information about package origin controls and configuration, see in the CodeArtifact User Guide.
PutPackageOriginConfigurationcan be called on a package that doesn't yet exist in the repository. When called on a package that does not exist, a package is created in the repository with no versions and the requested restrictions are set on the package. This can be used to preemptively block ingesting or retaining any versions from external connections or upstream repositories, or to block publishing any versions of the package into the repository before connecting any package managers or publishers to the repository. -
packagesDomainRepository.listPackagesReturns a list of objects for packages in a repository that match the request parameters.
-
repositories.listRepositoriesReturns a list of objects. Each
RepositorySummarycontains information about a repository in the specified Amazon Web Services account and that matches the input parameters. -
repository.associateExternalConnectionAdds an existing external connection to a repository. One external connection is allowed per repository.
A repository can have one or more upstream repositories, or an external connection.
-
repository.deleteRepositoryPermissionsPolicyDeletes the resource policy that is set on a repository. After a resource policy is deleted, the permissions allowed and denied by the deleted policy are removed. The effect of deleting a resource policy might not be immediate.
Use
DeleteRepositoryPermissionsPolicywith caution. After a policy is deleted, Amazon Web Services users, roles, and accounts lose permissions to perform the repository actions granted by the deleted policy. -
repository.disassociateExternalConnectionRemoves an existing external connection from a repository.
-
repository.getRepositoryEndpointReturns the endpoint of a repository for a specific package format. A repository has one endpoint for each package format:
-
maven -
npm -
nuget -
pypi
-
-
repository.getRepositoryPermissionsPolicyReturns the resource policy that is set on a repository.
-
repository.putRepositoryPermissionsPolicySets the resource policy on a repository that specifies permissions to access it.
When you call
PutRepositoryPermissionsPolicy, the resource policy on the repository is ignored when evaluting permissions. This ensures that the owner of a repository cannot lock themselves out of the repository, which would prevent them from being able to update the resource policy. -
repositoryDomainRepository.createRepositoryCreates a repository.
-
repositoryDomainRepository.deleteRepositoryDeletes a repository.
-
repositoryDomainRepository.describeRepositoryReturns a
RepositoryDescriptionobject that contains detailed information about the requested repository. -
repositoryDomainRepository.updateRepositoryUpdate the properties of a repository.
-
tagResourceArn.tagResourceAdds or updates tags for a resource in CodeArtifact.
-
tagsResourceArn.listTagsForResourceGets information about Amazon Web Services tags for a specified Amazon Resource Name (ARN) in CodeArtifact.
-
untagResourceArn.untagResourceRemoves tags from a resource in CodeArtifact.
-
openapi.previewSpecPreview an OpenAPI document before adding it as a source
-
openapi.addSourceAdd an OpenAPI source and register its operations as tools