INDEX

SL Topic Page No

1 Git 4

1.1 Download & install git in your local machine 5

1.2 Configure git with email and username 7

1.3 git clone project 8

2 CodeCommit 9

2.1 Login to AWS Account 10

2.2 Create Repository on CodeCommit 11

2.3 Connecting Codecommit Repo with local machine using SSH 12

2.4 Creating IAM user adding Codecommit policy 13

2.5 Generating SSH Token at git bash 20

2.6 Upload public at IAM user security credential 21

2.7 Creating config file in Git Bash & Verify Codecommit connection 22

2.8 Pushing the code to Codecommit & Verifying the code at 24

codecommit Repository

3 CodeDeploy 26

3.1 Create Application on CodeDeploy 27

3.2 Create EC2 Instance 29

3.3 Create S3ReadOnly IAM Role and attach to EC2 instance 33

3.4 Create CodeDeploy IAM Role for CodeDeploy 37

3.5 Create Deployment group inside CodeDeploy application 40

4 Codepipeline 43

4.1 Creating CodePipeline 44

4.2 Running the Pipeline 48

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 2

 PREREQUISITE

● AWS Account
● AWS EC2 Fundamental Knowledge
● AWS S3 Fundamental Knowledge
● AWS IAM Fundamental Knowledge
● Developer Tools on AWS Fundamental Knowledge
● Git Fundamental Knowledge
● Linux Fundamental Knowledge
● YAML Fundamental Knowledge

Services used

1. AWS-Public Cloud Platform. Following services are used:

○ Elastic Compute Cloud(EC2): for tomcat deployment server
○ IAM – for role & policy creation
○ S3 – for storing artifacts
○ CodeCommit – as code repository
○ CodeBuild – for building the code
○ CodeDeploy – for deploying the application
○ CodePipeline – for creating CICD pipeline
2. Language – used YAML for scripting

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 3

 Architectural Diagram

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 4

 1 Git

💠 Topic Page No

1.1 Download & install git in your local machine 6

1.2 Configure git with email and username 8

1.3 git clone project 9

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 5

 1.1 Download & install git in your local machine

Overview :

We have created a repository, it has nothing, we need to push the code in it , to

push/upload the code we have three ways , they are HTTPS, SSH, HTTPS (GRC), in among
them SSH will be commonly/mostly used way/method
Most of the developers uses git for source code management/version control , using the
git we push/upload the code from local machine to aws codecommit

Downloading & installing git on local windows machine - using Chocolatey :

Step -1 : Open powershell using administrator access

Step -2 : Install Chocolatey : Open the below weblink for the documentation
🔗 https://chocolatey.org/install#individual

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 6

Step-3: Copy the below command and run at powershell
📋 Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol =
[System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object
System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))

Step - 4 : Install git : Run command the below command in powershell to install git
📋 choco install git -y

git was successfully installed.

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 7

 1.2 Configure git with email and username

Git is a version control tool and source code management tool, to handle the code changes
and for uploading code from your pc to cloud repository we effectively use the git

Step -1 > Open Git Bash :

Once you install git in local machine , git bash also installed on your machine , it acts like a
bash terminal for running git commands
→ Search for Git Bash to open

Step - 2 > Configure Git :

Run the below commands one after one with your username and email
📋 git config --global user.name ”sagarfive”

📋 git config --global user.email ”[email protected]”

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 8

 1.3 git clone project

We have a web application source code in a git repository , we need to download the code
from git repository using git clone and in next steps we upload this code to CodeCommit
repository for Implementing CICD for this project

Step -1 > Github Repository : visit the github repository using below link and copy the HTTPS
clone link at github repository
📋 https://github.com/SagarFive/explore-world-bootstrap-website.git

Step-2 > Open Git Bash, Change your working directory to Desktop and Clone the project
using the previously copied link
📋 cd Desktop/

📋 git clone https://github.com/SagarFive/explore-world-bootstrap-website.git

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 9

 2 CodeCommit

💠 Topic Page No

2.1 Login to AWS Account 11

2.2 Create Repository on CodeCommit 12

2.3 Connecting Codecommit Repo with local machine using SSH 13

2.4 Creating IAM user adding Codecommit policy 14

2.5 Generating SSH Token at git bash 21

2.6 Upload public at IAM user security credential 22

2.7 Creating config file in Git Bash & Verify Codecommit connection 23

2.8 Pushing the code to Codecommit & Verifying the code at codecommit 25
Repository

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 10

 2.1 Login to AWS Account

Step - 1 > Login with your IAM Account(with Administrator Access) is Recommended
🔗AWS Login URL https://console.aws.amazon.com/console/home?nc2=h_ct&src=header-signin

Or if you don’t have an IAM Account or AWS Account , Create it by using below documentation.

🔗AWS Account Creation https://sagar5.in/aws/basics-of-aws-infrastructure/aws-user-account-creation/

🔗AWS IAM Account Creation https://sagar5.in/aws/aws-iam-user-administration/creating-iam-user/

Note: Add FullAdminAccess Policy for new IAM account

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 11

 2.2 Create Repository on CodeCommit

Step 1 - Open CodeCommit: Search for CodeCommit at AWS Search Bar and open/select it

Step 2 - Create repository : Click/Select Create repository

Step - 3 - Create repository : Enter Repository name , Description and tags and click on Create

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 12

 2.3 Connecting Codecommit Repo with local machine using SSH

Step 1 - Connection Steps : Once, after the CodeCommit repository is created, it will show the
below dashboard/page. Click on SSH and select your Operating system(in my case windows)
And we need to follow the below instructions to connect/upload with your local git repository

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 13

 2.4 Creating IAM user adding Codecommit policy

Overview :

● To upload/connect AWS CodeCommit repository with Local Machine/Local

Repository/Code, we need to establish a connection between AWS Codebuild and our PC
● Here we have Three ways , in among them SSH is a secured way using password less SSH
connection, with this reason we using this ssh connection method
● To Implement this SSH connection we need
(i) Create an IAM User for CodeCommit
(ii) Attach CodeCommit Repository permission policy to IAM user(above created)
(iii) Generate SSH Token at git bash, upload the public key token to IAM user (above
created)
(iv) Generate config file at Git Bash .ssh folder with the configuration of
Public Key ID from IAM user , Private key and AWS connection string
(v) verifying the connection
(vi) If the connection is successful then we are ready to upload the repository from local
machine to AWS CodeCommit Repository

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 14

Step 1 - Open IAM Service :

Step 2 - Create IAM User : Click on Users at sidebar

Step 3 - Add users : Click on Add users

Step 4 - Specify user details : Enter User name and Click on Next

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 15

Step 5 - Set permissions : Select Attach policies directly, next click on Create policy

Permissions options : Select

Permissions policies : Click on choose policy

When you click on a new tab open for creating the policy

When after clicking on Create policy , new tab opens with Create policy page

Step 6 - Create policy :

Policy creation : search and select
(i) service : codecommit

(ii)Actions :Specify the actions allowed in CodeCommit

Tick All CodeCommit actions (codecommit:*)

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 16

Step 7 - Resources : Select ARN

Step 7 - Add ARN : Add Region(Which region CodeCommit Repository Created) , Account(auto
updates) and Repository name : copy and paste the CodeCommit Repository name and next click
on Add

Next Click on Tags

Step 8 - Add Tags :

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 17

Step 9 - Review policy : Review details and click on Create policy button at bottom

When after clicking, policy generated, redirects to policy page , there we can we see the newly
created policy

Step 10 - Attach policy to IAM user : Get back to IAM Creation tab, click on refresh the permission
icon , next search for newly created policy , select and attach policy to IAM user

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 18

Step 10 - Review and create : verify and Create user

When after clicking Create user, Redirects users page and show newly created username in the
list,click on the user

Select the Security Credentials tab after clicking/opening the username

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 19

Step 11 - SSH public keys for AWS CodeCommit (0) : Here we need to upload the SSH Public key

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 20

 2.5 Generating SSH Token at git bash - uploading public key to IAM user

Step 1 - Generating Token :

Now we don’t have , so open Git bash and Generate Token,
To generate token Run command the below command
📋 Command ssh-keygen.exe

📋 Enter file in which to save the key <directory-up to .ssh/>/<your-key-name>

Enter passphrase (empty for no passphrase) : Press Enter

Enter same passphrase again: Press Enter

Key saved ! shows us the location, when the key stored

Step 12 - Copy the SSH public key: Read the public key using above information
Your public key has been saved in : /c/Users/sagar/.ssh/P1-ExploreWorld_CodeCommit-SSH-key.pub
📋 Command cat /c/Users/sagar/.ssh/P1-ExploreWorld_CodeCommit-SSH-key.pub

Now We Need upload the key at IAM security credentials

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 21

 2.6 Upload public at IAM user security credential

Step 1 - Go to SSH public keys for AWS CodeCommit (0) : (Follow 2.4 , step-11 to reach) ,
Click on Upload SSH Public key

Step 2 - Upload SSH Public key : Paste the key at input box and click on Upload SSH Public key

Step 3 - Copy SSH Key ID : Next page automatically redirect to users page, shows success status

Note : Copy the SSH Key ID,

Useful for creating config file

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 22

 2.7 Generate config file at Git Bash & Verify the Codecommit connection

(i) Overview:

Step 1 -Open Git bash : Run the below commands to create config file in ssh directory
📋 Command to enter/move into ssh directory cd .ssh

📋 Create config file vi file

Step 2 - Enter config file data : Follow step 3 of connections instruction and enter your
data(replace with your information)
📋 User Refer 2.6 > Step 3 - Copy SSH Key ID

📋 IdentityFile(Private key name) Refere 2.5 > Step 1 - Generating Token > Your Identification Saved in

Once this panel opens, Press I (to wire data), and Press ESC next Enter wq! To save the data

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 23

Step 3 - Read file and Modify the permissions of file :
📋 To Read the file cat config

📋 To Modify the permissions of file chmod 600 config

Step 4 - Verify the connection :

📋 Run the command to verify ssh -v git-codecommit.us-east-2.amazonaws.com

.
.
.
.

At bottom of the response , we can see

You have successfully authenticated over SSH. You can use Git to interact with AWS CodeCommit.

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 24

 2.8 Pushing the code to Codecommit & Verifying the code at codecommit
Repository

Step 1 - Open git bash - move in the local repository :

Step 2 - Copy the Remote repository link :

Follow step 4 of connections instruction and copy the only ssh Repository link , as showing as in
below screenshot ( Don’t copy and run Entair command)
Note : Refer → 2.3 Connecting Codecommit Repo with local machine using SSH for the link page

Step 3 - Add Remote Repository Origin :

📋 Toorigin
add remote git remote add origin
ssh://git-codecommit.us-east-1.amazonaws.com/v1/repos/P1-ExploreWorld-Repository

❌ If it’s response : error: remote origin already exists.

📋 Remove existing
origin
git remote remove origin

📋 Now add new

origin
git remote add origin
ssh://git-codecommit.us-east-1.amazonaws.com/v1/repos/P1-ExploreWorld-Repository

Step 4 - Push the Local Repository to AWS CodeCommit Repository :

📋 Check the repository files status(shows
updated files information)
git status

📋 Add files to staging area git add .

📋 Commit the changes with name git commit -m “Update Local Repository @ 05-02-2023-0902pm”

📋 Commit the changes with name git push origin main

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 25

Step 5 - Verify : Go to AWS Developer Tools > CodeCommit > Repositories > Select the
CodeCommit project P1-ExploreWorld-Repository

👍Open the repository and Now you can see the updated code At AWS CodeCommit Repository

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 26

 3 CodeDeploy

💠 Topic Page No

3.1 Create Application on CodeDeploy 28

3.2 Create EC2 Instance 30

3.3 Create S3ReadOnly IAM Role and attach to EC2 instance 34

3.4 Create CodeDeploy IAM Role for CodeDeploy 38

3.4 Create Deployment group inside CodeDeploy application 41

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 27

 3.1 Create Application on CodeDeploy

Step 1 - Open CodeDeploy : Search for CodeDeploy, Next select/open it

Step 2 - Create Application : Click on Applications on Sidebar , Next Click on Create application

Next, Enter Application configuration :

● Application name : <app-name>
and
● Compute platform : EC2/On-premises
Next Click on Create application

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 28

After Clicking on Create application, it auto redirects to application page, and shows you created
application in the list

Click on the Application, it asks for Create deployment group

📋
Deployment
Deployment group contains instances to add the deployment(means web server files), It includes
● Amazon EC2 Auto Scaling groups
Group ● Amazon EC2 instances
● On-premises instances
So we need a Create an EC2 instance for web server

💠Note : Let’s Create an EC2 Instance with S3 ReadOnly Access Role(for retrieving the web server
files)

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 29

 3.2 Create EC2 Instance with S3ReadOnly IAM Role

Step 1 - Open EC2 Service :

Step 2 - Launch instance :

Step 3 - Launch an instance :

Sl.No Stage/step Details/configurations

(i) Name P1-ExploreWorld_DeploymentGroup_VM-EC2-Server

Application and OS Amazon Linux 2 AMI (HVM) - Kernel 5.10

(ii) Images

(iii) Instance type t2.micro

(iii) Key pair (login) New → Name , type=RSA , Format=.pem

(iv) Network settings Allow SSH traffic from Anywhere

Allow HTTP traffic from the internet

(v) Advanced details User data : copy paste below data

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 30

 📝 #!/bin/bash
sudo yum -y update
sudo yum -y install ruby
sudo yum -y install wget
cd /home/ec2-user
wget https://aws-codedeploy-us-east-1.s3.amazonaws.com/latest/install
sudo chmod +x ./install
sudo ./install auto

(i) Name : P1-ExploreWorld_DeploymentGroup_VM-EC2-Server or your wish

(ii) Instance type : t2.micro (1GB RAM - 1 Core CPU - Free Tier eligible)

(iii) Key pair : It’s a SSH key (It’s used to enable password less logins)
● New → Name ,
● Keypair type=RSA ,
● Private key file Format=.pem

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 31

(iv) Network settings : Using Default settings,
Allow SSH traffic from Anywhere
Allow HTTP traffic from the internet

(v) Advanced settings : Scroll down and add userdata for CodeDeploy Agent installation
CodeDeploy Agent needs to be installed on the machine to handle the CodeDeploy operations

Copy and paste the Userdata (Bootstrap) script from below

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 32

 📝 #!/bin/bash
sudo yum -y update
sudo yum -y install ruby
sudo yum -y install wget
cd /home/ec2-user
wget https://aws-codedeploy-us-east-1.s3.amazonaws.com/latest/install
sudo chmod +x ./install
sudo ./install auto

Once after clicking on Launch Instance , It will show the Success dialogue , click on blue color
instance id in dialogue box

On Instances page , we can see EC2 instance showing Running

Next we need to attach S3ReadonlyAccess Role from grabbing web server files from it

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 33

 3.3 Create S3ReadOnly IAM Role and attach to EC2 instance

Step 1 - Open IAM : Open IAM

Step 2 - Open Roles : Click on Roles on Sidebar

Step 3 - Create Role : click on Create role

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 34

Step 4 - Start Creating role :
(i) Select trusted entity Trusted entity type AWS service

Use case EC2

(ii) Add permissions Permissions policies AmazonS3ReadOnlyAccess

(iii) Name, review, and create Role name <your-role-name>

tags <your-tags>

(i) Select trusted entity :

(ii) Add permissions

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 35

(iii) Name, review, and create :

Once after clicking on Create role , it will shows you success info, you can click on view role for
further information if you want to explore

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 36

Step 5 - Attaching Role to EC2 instance :
Select the instance > Actions > Security > Modify IAM role

Modify IAM role : Search for role and select it , Next click on Update IAM role

Role is applied to EC2 Instance.

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 37

 3.4 Create CodeDeploy IAM Role for CodeDeploy

Step 1 - Open IAM : Open IAM

Step 2 - Open Roles : Click on Roles on Sidebar

Step 3 - Create Role : click on Create role

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 38

Step 4 - Start Creating role :
(i) Select trusted entity Trusted entity type AWS service

Use case CodeDeploy

(ii) Add permissions Permissions policies AWSCodeDeployRole

(iii) Name, review, and create Role name <your-role-name>

tags <your-tags>

(i) Select trusted entity :

(ii) Add permissions : Selected AWSCodeDeployRole , Click on Next

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 39

(iii) Name, review, and create : Review and Click on Create role

Once after clicking it , wait few seconds - Role is created

Now Go to CodeDeploy Application - Create Deployment group in- add role it

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 40

 3.5 Create Deployment group inside CodeDeploy application

Step 1 -Open CodeDeploy-Applications :

Step 2 - Create deployment group : Click on Create deployment group

Step 3 - Create deployment group: Add the below configuration

(i) Deployment group name <name-your-deploy-group>

(ii) Service role Select the Previously created service role

(iii) Deployment type In-place

(iv) Environment configuration Amazon EC2 instances

(v) Agent configuration with AWS Install AWS CodeDeploy Agent : Select Never

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 41

 Systems Manager

(vi) Deployment settings CodeDeployDefault:AllAtOnce

(vii) Load balancer Untick Enable Load Balancer

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 42

Click on Create deployment group, Next Deployment group is created.

Next we need to create code pipeline for CICD automation

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 43

 4 Codepipeline

💠 Topic Page No

4.1 Creating CodePipeline 45

4.2 Running the Pipeline 49

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 44

 4.1 Creating CodePipeline

Step 1 - Open CodePipeline : Open it by Searching or Click CodePipeline from sidebar on

CodeDeploy

Step 2 - Create pipeline : Click on Create pipeline

Step 3 - Choose pipeline settings :

Steps

(i) Choose pipeline settings Pipeline name: <name-codepipeline-name>

Service role : Select New service role

Role name : <name-it or auto generates>

Tick Allow AWS CodePipeline to create a service role

so it can be used with this new pipeline

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 45

 (ii) Add source stage Source provider : AWSCodeCommit

Repository name : <previously-created-codecommit-repo>

Branch name : main

Change detection options : Select

Amazon CloudWatch Events (recommended)

Output artifact format : Select

CodePipeline default

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 46

 (iii) Add build stag Skip build stage

(iv) Add deploy stage Deploy provider : AWS CodeDeploy

Region : N.Virginia

Application name : <your-application-name>

Deployment group : <your-Deployment-group-name>

(v) Review Review Details

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 47

 Click on Create pipeline at bottom

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 48

 4.2 Running the Pipeline

Step 1 -Check the pipeline : Open the pipeline : Pipeline already started working & shows you the
status

Step 2 - Click on CodeDeploy on Deploy stage : Shows you status

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 49

Step 3 - Click on Deployments tab : Here you can see First time it failed, we need to check logs at
ec2 instance for troubleshooting

Step 4 - Login to EC2 to see logs :

Select instance > connect > connect

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 50

Step 6 - Read logs : Run the commands one by one

📝 cd /var/log/aws/codedeploy-agent

📝 ls

📝 cat codedeploy-agent.log

Now we can see logs at terminals

Once restart the codedeploy-agent :

sudo service codedeploy-agent restart

Get back to CodePipeline and click on Release change

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 51

Now you will see success at this time

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 52

Step 7 - Checking CICD : changing the index.html
Update the index.html at CodeCommit repository

You can see it downloaded code from codebuild repo source and deployed to Deployment group
server by using commit changes

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 53

Step 8 - Open the public IP on browser : CodeDeploy is Deployed our code to server

Step 9 - CICD Auto Deployment : When you refresh the page, we can see the Thanks for visiting in
the footer, means when we commit the changes Codepipeline automatically deploy the changes to
server

It’s Done ! Creating CICD pipeline using AWS Developers Tools like CodeCommit , CodeDeploy
and CodePipeline.

Thank you !

Deploying web Application using CodeCommit, CodeDeploy and CodePipeline on AWS 54