AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-13 · Documentation medium

File: cli/latest/reference/codebuild/update-project.md

Summary

Added pullRequestBuildPolicy configuration with comment-based approval requirements and approver roles for pull request builds

Security assessment

Documents the same security controls as create-webhook.md for project updates. Enhances security posture but doesn't indicate remediation of a specific known issue.

Diff

diff --git a/cli/latest/reference/codebuild/update-project.md b/cli/latest/reference/codebuild/update-project.md
index b228234cc..36d0ca4c3 100644
--- a//cli/latest/reference/codebuild/update-project.md
+++ b//cli/latest/reference/codebuild/update-project.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.6 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
@@ -2709,0 +2710,20 @@ project -> (structure)
+>> 
+>> pullRequestBuildPolicy -> (structure)
+>>
+>>> A PullRequestBuildPolicy object that defines comment-based approval requirements for triggering builds on pull requests. This policy helps control when automated builds are executed based on contributor permissions and approval workflows.
+>>> 
+>>> requiresCommentApproval -> (string)
+>>>
+>>>> Specifies when comment-based approval is required before triggering a build on pull requests. This setting determines whether builds run automatically or require explicit approval through comments.
+>>>> 
+>>>>   * _DISABLED_ : Builds trigger automatically without requiring comment approval
+>>>>   * _ALL_PULL_REQUESTS_ : All pull requests require comment approval before builds execute (unless contributor is one of the approver roles)
+>>>>   * _FORK_PULL_REQUESTS_ : Only pull requests from forked repositories require comment approval (unless contributor is one of the approver roles)
+>>>> 
+
+>>> 
+>>> approverRoles -> (list)
+>>>
+>>>> List of repository roles that have approval privileges for pull request builds when comment approval is required. Only users with these roles can provide valid comment approvals. If a pull request contributor is one of these roles, their pull request builds will trigger automatically. This field is only applicable when `requiresCommentApproval` is not _DISABLED_ .
+>>>> 
+>>>> (string)
@@ -2938 +2958 @@ project -> (structure)
-  * [AWS CLI 2.28.6 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.8 Command Reference](../../index.html) »