AWS ECS containers as build agents on bitbucket pipelines

[Viktor Ivershin]

Hello,

I want to make builds inside of aws containers to make access direct into infrastructure by internal iam roles to avoid putting inside docker aws creds, is there way to use ecs as build agents?

[mkleint]

pipelines builds run inside atlassian's aws infrastructure on kubernetes.

in order to access your AWS infratructure including your IAM roles, you will need to establish trust via AWS Access keys/secret keys. Even if we ran the builds with some AWS IAM role, it would be insecure for you to let that role assume roles in your AWS account. Eveyone running builds on pipelines could then use/modify your infrastructure.