AWS codebuild documentation change

Service: codebuild · 2025-03-30 · Documentation low

File: codebuild/latest/userguide/build-spec-ref.md

Summary

Added documentation for cache key configuration including primary key, fallback keys, and action parameters

Security assessment

The changes describe cache configuration options but do not address security vulnerabilities or introduce security features. The documentation focuses on build optimization rather than security controls.

Diff

diff --git a/codebuild/latest/userguide/build-spec-ref.md b/codebuild/latest/userguide/build-spec-ref.md
index 2bd695293..7c14cf234 100644
--- a/codebuild/latest/userguide/build-spec-ref.md
+++ b/codebuild/latest/userguide/build-spec-ref.md
@@ -170,0 +171,5 @@ The buildspec has the following syntax:
+      key: key
+      fallback-keys:
+        - fallback-key
+        - fallback-key
+      action: restore | save
@@ -804,0 +810,37 @@ Optional sequence. Represents information about where CodeBuild can prepare the
+cache/**key**
+    
+
+Optional sequence. Represents the primary key used when search or restore a cache. CodeBuild does an exact match for the primary key.
+
+Here is an example for the key:
+    
+    
+    key: npm-key-$(codebuild-hash-files package-lock.json) }
+
+cache/**fallback-keys**
+    
+
+Optional sequence. Represents a list of fallback keys used sequentially when a cache cannot be found using the primary key. Up to five fallback keys are supported, and each is matched using a prefix search. This sequence will be ignored if **key** is not provided.
+
+Here is an example for the fallback-keys:
+    
+    
+    fallback-keys:
+        - npm-key-$(codebuild-hash-files package-lock.json) }
+        - npm-key-
+        - npm-
+
+cache/**action**
+    
+
+Optional sequence. Specifies the action to perform on the cache. This sequence will be ignored if **key** is not provided. Valid values include:
+
+  * `restore` which only restores the cache without saving updates.
+
+  * `save` which only saves the cache without restoring a previous version.
+
+
+
+
+If no value is provided, CodeBuild defaults to performing both restore and save.
+