buildspec.yml: Build Docker Image, push to ECR and deploy to ECS (imagedefinitions.json)

buildspec.yml

version: 0.2

# Set the following env vars in CodeBuild (Environment Settings)
# You will get most of them from the ECR URI: <ACCOUNT_ID>.dkr.ecr.<ECR_REGION>.amazonaws.com/<ECR_REPOSITORY_NAME>
#
# ACCOUNT_ID
# ECR_REGION
# ECR_REPOSITORY_NAME
# ECS_CONTAINER_NAME
#
# The CodeBuild ServiceRole needs to have the following Permissions to upload to your (private) ECR
#
# "ecr:BatchCheckLayerAvailability",
# "ecr:CompleteLayerUpload",
# "ecr:GetAuthorizationToken",
# "ecr:InitiateLayerUpload",
# "ecr:PutImage",
# "ecr:UploadLayerPart"

phases:
  pre_build:
    commands:
      - ECR_REPOSITORY_BASE_URI=$ACCOUNT_ID.dkr.ecr.$ECR_REGION.amazonaws.com
      - ECR_REPOSITORY_URI=$ECR_REPOSITORY_BASE_URI/$ECR_REPOSITORY_NAME
      - COMMIT_HASH=$(echo $CODEBUILD_RESOLVED_SOURCE_VERSION | cut -c 1-7) # we need the short hash
      - IMAGE_TAG=${COMMIT_HASH:=latest} # use short hash or fallback to latest
      - echo Logging in to Amazon ECR...
      - aws ecr get-login-password --region $ECR_REGION | docker login --username AWS --password-stdin $ECR_REPOSITORY_BASE_URI

  build:
    commands:
      - echo Building the Docker image...
      - docker build -t $ECR_REPOSITORY_URI:latest .
      - docker tag $ECR_REPOSITORY_URI:latest $ECR_REPOSITORY_URI:$IMAGE_TAG

  post_build:
    commands:
      - echo Pushing the Docker images...
      - docker push $ECR_REPOSITORY_URI:latest
      - docker push $ECR_REPOSITORY_URI:$IMAGE_TAG
      - echo Writing image definitions file...
      - printf '[{"name":"%s","imageUri":"%s"}]' "$ECS_CONTAINER_NAME" "$ECR_REPOSITORY_URI:$IMAGE_TAG" > imagedefinitions.json

artifacts:
  files: imagedefinitions.json