aws-sdk-codebuild 1.160.0 → 1.161.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ad726584d491e26f11e3f5f52d66c064dd88a76a81bcfe86ded34a569fbe742b
-  data.tar.gz: a99d7bd5d732861948c1f58c80cc10ec8e664729e7cf00de871adb6b898fedf4
+  metadata.gz: 823f589e2ccc20585ebdae2c47c4ec5c044d6bc48de579efef0a688f23cdcba2
+  data.tar.gz: 19d94829dbb363a6cc8a80533c7d5fc864e84da4343f14e1fc212bc3561ba97a
 SHA512:
-  metadata.gz: 4f0588bad7c23a8d8bbe90bab9b69e2ff965aab44d97b28512a3098c9f22ea8781b917db6941ebd43d9f267505d942fa8eaabf7f580cb45cd9c152225d273846
-  data.tar.gz: 3aeca9001f80da03abe7d087ecca3fe7c4b7afabbfe27404d45ec939cec3061c00151e507a4df1b1d8347d22f41121ed60fc4309ae11823ceec7d66bd80f826a
+  metadata.gz: 67449f79e6ad5b4573cd51797f6ad77d664750fc8785e08263987aba5ec7769d92c28a1d457813f86ad7e9ee5fb6fda5569aa4088145a111be1898186502ca79
+  data.tar.gz: b7034b93000f0067f0da2cee91593844bfc0a3c6e8af7cd613725b833c3ee23f956fe95eb10f6add1a5f44330bf0b28a6cc93731f55b7982c17526881292cf4b

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.161.0 (2025-08-07)
+------------------
+
+* Feature - AWS CodeBuild now supports comment-based pull request control.
+
 1.160.0 (2025-08-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.160.0
+1.161.0

data/lib/aws-sdk-codebuild/client.rb

@@ -2355,6 +2355,12 @@ module Aws::CodeBuild
     #
     #    </note>
     #
+    # @option params [Types::PullRequestBuildPolicy] :pull_request_build_policy
+    #   A PullRequestBuildPolicy object that defines comment-based approval
+    #   requirements for triggering builds on pull requests. This policy helps
+    #   control when automated builds are executed based on contributor
+    #   permissions and approval workflows.
+    #
     # @return [Types::CreateWebhookOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateWebhookOutput#webhook #webhook} => Types::Webhook
@@ -2380,6 +2386,10 @@ module Aws::CodeBuild
     #       domain: "String",
     #       scope: "GITHUB_ORGANIZATION", # required, accepts GITHUB_ORGANIZATION, GITHUB_GLOBAL, GITLAB_GROUP
     #     },
+    #     pull_request_build_policy: {
+    #       requires_comment_approval: "DISABLED", # required, accepts DISABLED, ALL_PULL_REQUESTS, FORK_PULL_REQUESTS
+    #       approver_roles: ["GITHUB_READ"], # accepts GITHUB_READ, GITHUB_TRIAGE, GITHUB_WRITE, GITHUB_MAINTAIN, GITHUB_ADMIN, GITLAB_GUEST, GITLAB_PLANNER, GITLAB_REPORTER, GITLAB_DEVELOPER, GITLAB_MAINTAINER, GITLAB_OWNER, BITBUCKET_READ, BITBUCKET_WRITE, BITBUCKET_ADMIN
+    #     },
     #   })
     #
     # @example Response structure
@@ -4373,13 +4383,16 @@ module Aws::CodeBuild
     #   ability to call this API and set this parameter can override the
     #   default settings. Moreover, we encourage that you use a trustworthy
     #   buildspec location like a file in your source repository or a Amazon
-    #   S3 bucket.
+    #   S3 bucket. Alternatively, you can restrict overrides to the buildspec
+    #   by using a condition key: [Prevent unauthorized modifications to
+    #   project buildspec][2].
     #
     #    </note>
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/codebuild/latest/userguide/build-spec-ref.html#build-spec-ref-name-storage
+    #   [2]: https://docs.aws.amazon.com/codebuild/latest/userguide/action-context-keys.html#action-context-keys-example-overridebuildspec.html
     #
     # @option params [Boolean] :insecure_ssl_override
     #   Enable this flag to override the insecure SSL setting that is
@@ -7007,6 +7020,12 @@ module Aws::CodeBuild
     #
     #   [1]: https://docs.aws.amazon.com/codebuild/latest/userguide/sample-runner-buildkite.html
     #
+    # @option params [Types::PullRequestBuildPolicy] :pull_request_build_policy
+    #   A PullRequestBuildPolicy object that defines comment-based approval
+    #   requirements for triggering builds on pull requests. This policy helps
+    #   control when automated builds are executed based on contributor
+    #   permissions and approval workflows.
+    #
     # @return [Types::UpdateWebhookOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateWebhookOutput#webhook #webhook} => Types::Webhook
@@ -7027,6 +7046,10 @@ module Aws::CodeBuild
     #       ],
     #     ],
     #     build_type: "BUILD", # accepts BUILD, BUILD_BATCH, RUNNER_BUILDKITE_BUILD
+    #     pull_request_build_policy: {
+    #       requires_comment_approval: "DISABLED", # required, accepts DISABLED, ALL_PULL_REQUESTS, FORK_PULL_REQUESTS
+    #       approver_roles: ["GITHUB_READ"], # accepts GITHUB_READ, GITHUB_TRIAGE, GITHUB_WRITE, GITHUB_MAINTAIN, GITHUB_ADMIN, GITLAB_GUEST, GITLAB_PLANNER, GITLAB_REPORTER, GITLAB_DEVELOPER, GITLAB_MAINTAINER, GITLAB_OWNER, BITBUCKET_READ, BITBUCKET_WRITE, BITBUCKET_ADMIN
+    #     },
     #   })
     #
     # @example Response structure
@@ -7076,7 +7099,7 @@ module Aws::CodeBuild
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-codebuild'
-      context[:gem_version] = '1.160.0'
+      context[:gem_version] = '1.161.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-codebuild/client_api.rb

@@ -231,6 +231,10 @@ module Aws::CodeBuild
     ProjectVisibilityType = Shapes::StringShape.new(name: 'ProjectVisibilityType')
     Projects = Shapes::ListShape.new(name: 'Projects')
     ProxyConfiguration = Shapes::StructureShape.new(name: 'ProxyConfiguration')
+    PullRequestBuildApproverRole = Shapes::StringShape.new(name: 'PullRequestBuildApproverRole')
+    PullRequestBuildApproverRoles = Shapes::ListShape.new(name: 'PullRequestBuildApproverRoles')
+    PullRequestBuildCommentApproval = Shapes::StringShape.new(name: 'PullRequestBuildCommentApproval')
+    PullRequestBuildPolicy = Shapes::StructureShape.new(name: 'PullRequestBuildPolicy')
     PutResourcePolicyInput = Shapes::StructureShape.new(name: 'PutResourcePolicyInput')
     PutResourcePolicyOutput = Shapes::StructureShape.new(name: 'PutResourcePolicyOutput')
     RegistryCredential = Shapes::StructureShape.new(name: 'RegistryCredential')
@@ -672,6 +676,7 @@ module Aws::CodeBuild
     CreateWebhookInput.add_member(:build_type, Shapes::ShapeRef.new(shape: WebhookBuildType, location_name: "buildType"))
     CreateWebhookInput.add_member(:manual_creation, Shapes::ShapeRef.new(shape: WrapperBoolean, location_name: "manualCreation"))
     CreateWebhookInput.add_member(:scope_configuration, Shapes::ShapeRef.new(shape: ScopeConfiguration, location_name: "scopeConfiguration"))
+    CreateWebhookInput.add_member(:pull_request_build_policy, Shapes::ShapeRef.new(shape: PullRequestBuildPolicy, location_name: "pullRequestBuildPolicy"))
     CreateWebhookInput.struct_class = Types::CreateWebhookInput
 
     CreateWebhookOutput.add_member(:webhook, Shapes::ShapeRef.new(shape: Webhook, location_name: "webhook"))
@@ -1166,6 +1171,12 @@ module Aws::CodeBuild
     ProxyConfiguration.add_member(:ordered_proxy_rules, Shapes::ShapeRef.new(shape: FleetProxyRules, location_name: "orderedProxyRules"))
     ProxyConfiguration.struct_class = Types::ProxyConfiguration
 
+    PullRequestBuildApproverRoles.member = Shapes::ShapeRef.new(shape: PullRequestBuildApproverRole)
+
+    PullRequestBuildPolicy.add_member(:requires_comment_approval, Shapes::ShapeRef.new(shape: PullRequestBuildCommentApproval, required: true, location_name: "requiresCommentApproval"))
+    PullRequestBuildPolicy.add_member(:approver_roles, Shapes::ShapeRef.new(shape: PullRequestBuildApproverRoles, location_name: "approverRoles"))
+    PullRequestBuildPolicy.struct_class = Types::PullRequestBuildPolicy
+
     PutResourcePolicyInput.add_member(:policy, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "policy"))
     PutResourcePolicyInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "resourceArn"))
     PutResourcePolicyInput.struct_class = Types::PutResourcePolicyInput
@@ -1568,6 +1579,7 @@ module Aws::CodeBuild
     UpdateWebhookInput.add_member(:rotate_secret, Shapes::ShapeRef.new(shape: Boolean, location_name: "rotateSecret"))
     UpdateWebhookInput.add_member(:filter_groups, Shapes::ShapeRef.new(shape: FilterGroups, location_name: "filterGroups"))
     UpdateWebhookInput.add_member(:build_type, Shapes::ShapeRef.new(shape: WebhookBuildType, location_name: "buildType"))
+    UpdateWebhookInput.add_member(:pull_request_build_policy, Shapes::ShapeRef.new(shape: PullRequestBuildPolicy, location_name: "pullRequestBuildPolicy"))
     UpdateWebhookInput.struct_class = Types::UpdateWebhookInput
 
     UpdateWebhookOutput.add_member(:webhook, Shapes::ShapeRef.new(shape: Webhook, location_name: "webhook"))

data/lib/aws-sdk-codebuild/types.rb

@@ -2204,6 +2204,13 @@ module Aws::CodeBuild
     #    </note>
     #   @return [Types::ScopeConfiguration]
     #
+    # @!attribute [rw] pull_request_build_policy
+    #   A PullRequestBuildPolicy object that defines comment-based approval
+    #   requirements for triggering builds on pull requests. This policy
+    #   helps control when automated builds are executed based on
+    #   contributor permissions and approval workflows.
+    #   @return [Types::PullRequestBuildPolicy]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/codebuild-2016-10-06/CreateWebhookInput AWS API Documentation
     #
     class CreateWebhookInput < Struct.new(
@@ -2212,7 +2219,8 @@ module Aws::CodeBuild
       :filter_groups,
       :build_type,
       :manual_creation,
-      :scope_configuration)
+      :scope_configuration,
+      :pull_request_build_policy)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5504,6 +5512,46 @@ module Aws::CodeBuild
       include Aws::Structure
     end
 
+    # Configuration policy that defines comment-based approval requirements
+    # for triggering builds on pull requests. This policy helps control when
+    # automated builds are executed based on contributor permissions and
+    # approval workflows.
+    #
+    # @!attribute [rw] requires_comment_approval
+    #   Specifies when comment-based approval is required before triggering
+    #   a build on pull requests. This setting determines whether builds run
+    #   automatically or require explicit approval through comments.
+    #
+    #   * *DISABLED*: Builds trigger automatically without requiring comment
+    #     approval
+    #
+    #   * *ALL\_PULL\_REQUESTS*: All pull requests require comment approval
+    #     before builds execute (unless contributor is one of the approver
+    #     roles)
+    #
+    #   * *FORK\_PULL\_REQUESTS*: Only pull requests from forked
+    #     repositories require comment approval (unless contributor is one
+    #     of the approver roles)
+    #   @return [String]
+    #
+    # @!attribute [rw] approver_roles
+    #   List of repository roles that have approval privileges for pull
+    #   request builds when comment approval is required. Only users with
+    #   these roles can provide valid comment approvals. If a pull request
+    #   contributor is one of these roles, their pull request builds will
+    #   trigger automatically. This field is only applicable when
+    #   `requiresCommentApproval` is not *DISABLED*.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/codebuild-2016-10-06/PullRequestBuildPolicy AWS API Documentation
+    #
+    class PullRequestBuildPolicy < Struct.new(
+      :requires_comment_approval,
+      :approver_roles)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] policy
     #   A JSON-formatted resource policy. For more information, see [Sharing
     #   a Project][1] and [Sharing a Report Group][2] in the *CodeBuild User
@@ -6889,13 +6937,16 @@ module Aws::CodeBuild
     #   with the ability to call this API and set this parameter can
     #   override the default settings. Moreover, we encourage that you use a
     #   trustworthy buildspec location like a file in your source repository
-    #   or a Amazon S3 bucket.
+    #   or a Amazon S3 bucket. Alternatively, you can restrict overrides to
+    #   the buildspec by using a condition key: [Prevent unauthorized
+    #   modifications to project buildspec][2].
     #
     #    </note>
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/codebuild/latest/userguide/build-spec-ref.html#build-spec-ref-name-storage
+    #   [2]: https://docs.aws.amazon.com/codebuild/latest/userguide/action-context-keys.html#action-context-keys-example-overridebuildspec.html
     #   @return [String]
     #
     # @!attribute [rw] insecure_ssl_override
@@ -8036,6 +8087,13 @@ module Aws::CodeBuild
     #   [1]: https://docs.aws.amazon.com/codebuild/latest/userguide/sample-runner-buildkite.html
     #   @return [String]
     #
+    # @!attribute [rw] pull_request_build_policy
+    #   A PullRequestBuildPolicy object that defines comment-based approval
+    #   requirements for triggering builds on pull requests. This policy
+    #   helps control when automated builds are executed based on
+    #   contributor permissions and approval workflows.
+    #   @return [Types::PullRequestBuildPolicy]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/codebuild-2016-10-06/UpdateWebhookInput AWS API Documentation
     #
     class UpdateWebhookInput < Struct.new(
@@ -8043,7 +8101,8 @@ module Aws::CodeBuild
       :branch_filter,
       :rotate_secret,
       :filter_groups,
-      :build_type)
+      :build_type,
+      :pull_request_build_policy)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-codebuild.rb

@@ -54,7 +54,7 @@ module Aws::CodeBuild
   autoload :EndpointProvider, 'aws-sdk-codebuild/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-codebuild/endpoints'
 
-  GEM_VERSION = '1.160.0'
+  GEM_VERSION = '1.161.0'
 
 end
 

data/sig/client.rbs

@@ -464,6 +464,10 @@ module Aws
                               name: ::String,
                               domain: ::String?,
                               scope: ("GITHUB_ORGANIZATION" | "GITHUB_GLOBAL" | "GITLAB_GROUP")
+                            },
+                            ?pull_request_build_policy: {
+                              requires_comment_approval: ("DISABLED" | "ALL_PULL_REQUESTS" | "FORK_PULL_REQUESTS"),
+                              approver_roles: Array[("GITHUB_READ" | "GITHUB_TRIAGE" | "GITHUB_WRITE" | "GITHUB_MAINTAIN" | "GITHUB_ADMIN" | "GITLAB_GUEST" | "GITLAB_PLANNER" | "GITLAB_REPORTER" | "GITLAB_DEVELOPER" | "GITLAB_MAINTAINER" | "GITLAB_OWNER" | "BITBUCKET_READ" | "BITBUCKET_WRITE" | "BITBUCKET_ADMIN")]?
                             }
                           ) -> _CreateWebhookResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateWebhookResponseSuccess
@@ -1493,7 +1497,11 @@ module Aws
                                 },
                               ],
                             ],
-                            ?build_type: ("BUILD" | "BUILD_BATCH" | "RUNNER_BUILDKITE_BUILD")
+                            ?build_type: ("BUILD" | "BUILD_BATCH" | "RUNNER_BUILDKITE_BUILD"),
+                            ?pull_request_build_policy: {
+                              requires_comment_approval: ("DISABLED" | "ALL_PULL_REQUESTS" | "FORK_PULL_REQUESTS"),
+                              approver_roles: Array[("GITHUB_READ" | "GITHUB_TRIAGE" | "GITHUB_WRITE" | "GITHUB_MAINTAIN" | "GITHUB_ADMIN" | "GITLAB_GUEST" | "GITLAB_PLANNER" | "GITLAB_REPORTER" | "GITLAB_DEVELOPER" | "GITLAB_MAINTAINER" | "GITLAB_OWNER" | "BITBUCKET_READ" | "BITBUCKET_WRITE" | "BITBUCKET_ADMIN")]?
+                            }
                           ) -> _UpdateWebhookResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateWebhookResponseSuccess
     end

data/sig/types.rbs

@@ -396,6 +396,7 @@ module Aws::CodeBuild
       attr_accessor build_type: ("BUILD" | "BUILD_BATCH" | "RUNNER_BUILDKITE_BUILD")
       attr_accessor manual_creation: bool
       attr_accessor scope_configuration: Types::ScopeConfiguration
+      attr_accessor pull_request_build_policy: Types::PullRequestBuildPolicy
       SENSITIVE: []
     end
 
@@ -1012,6 +1013,12 @@ module Aws::CodeBuild
       SENSITIVE: []
     end
 
+    class PullRequestBuildPolicy
+      attr_accessor requires_comment_approval: ("DISABLED" | "ALL_PULL_REQUESTS" | "FORK_PULL_REQUESTS")
+      attr_accessor approver_roles: ::Array[("GITHUB_READ" | "GITHUB_TRIAGE" | "GITHUB_WRITE" | "GITHUB_MAINTAIN" | "GITHUB_ADMIN" | "GITLAB_GUEST" | "GITLAB_PLANNER" | "GITLAB_REPORTER" | "GITLAB_DEVELOPER" | "GITLAB_MAINTAINER" | "GITLAB_OWNER" | "BITBUCKET_READ" | "BITBUCKET_WRITE" | "BITBUCKET_ADMIN")]
+      SENSITIVE: []
+    end
+
     class PutResourcePolicyInput
       attr_accessor policy: ::String
       attr_accessor resource_arn: ::String
@@ -1492,6 +1499,7 @@ module Aws::CodeBuild
       attr_accessor rotate_secret: bool
       attr_accessor filter_groups: ::Array[::Array[Types::WebhookFilter]]
       attr_accessor build_type: ("BUILD" | "BUILD_BATCH" | "RUNNER_BUILDKITE_BUILD")
+      attr_accessor pull_request_build_policy: Types::PullRequestBuildPolicy
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-codebuild
 version: !ruby/object:Gem::Version
-  version: 1.160.0
+  version: 1.161.0
 platform: ruby
 authors:
 - Amazon Web Services