Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AWS CodeArtifact: A fully managed software artifact repository service

aws.amazon.com

Post reply on HN
Print view View original

11–20 of 92 posts

Re: AWS CodeArtifact: A fully managed software artifact repository service

#11

Post by dahfizz »

dmlittle wrote: post #6
dahfizz wrote: post #4

I don't get it. The git server you use supports artifacts already. You could also just put all of your artifacts on an S3 bucket if you needed somewhere to put them, which is exactly what this is but more expensive. I don't understand when this would save you money or simplify devops.

The benefit is being able to keep your existing maven/npm/pip workflows as well as use the same workflow for both internal and public dependencies.

I still don't see what's different. I can configure pip to look at my git server, so that all I have to do is `pip install my_thing` and it will automatically download all public and private deps. I don't know what you mean by "workflow" in this context but this is just about as simple as can be.

Re: AWS CodeArtifact: A fully managed software artifact repository service

#12

Post by antoncohen »

The login credentials expire after 12 hours (or less)[1], just like with their Docker registry (ECR). That makes it pretty annoying to use, especially on developer laptops.

GCP has a similar offering[2]. And GitHub[3].

[1] https://docs.aws.amazon.com/codeartifact/latest/ug/python-co...

[2] https://cloud.google.com/artifact-registry

[3] https://github.com/features/packages

Re: AWS CodeArtifact: A fully managed software artifact repository service

#13

Post by toomuchtodo »

antoncohen wrote: post #12

The login credentials expire after 12 hours (or less)[1], just like with their Docker registry (ECR). That makes it pretty annoying to use, especially on developer laptops. GCP has a similar offering[2]. And GitHub[3]. [1] https://docs.aws.amazon.com/codeartifact/latest/ug/python-co... [2] https://cloud.google.com/artifact-registry [3] https://github.com/features/packages

You should have a shell alias to rapidly top up your auth token, just like with the Docker ECR. Short lived tokens are best practice, and a 12 hour TTL is reasonable. That’s no more than two auths in a day as a dev.

Re: AWS CodeArtifact: A fully managed software artifact repository service

#14

Post by [deleted] »

dahfizz wrote: post #11
dmlittle wrote: post #6

Earlier quoted context omitted.

The benefit is being able to keep your existing maven/npm/pip workflows as well as use the same workflow for both internal and public dependencies.

I still don't see what's different. I can configure pip to look at my git server, so that all I have to do is `pip install my_thing` and it will automatically download all public and private deps. I don't know what you mean by "workflow" in this context but this is just about as simple as can be.

[deleted]

Re: AWS CodeArtifact: A fully managed software artifact repository service

#15

Post by antoncohen »

toomuchtodo wrote: post #13
antoncohen wrote: post #12

The login credentials expire after 12 hours (or less)[1], just like with their Docker registry (ECR). That makes it pretty annoying to use, especially on developer laptops. GCP has a similar offering[2]. And GitHub[3]. [1] https://docs.aws.amazon.com/codeartifact/latest/ug/python-co... [2] https://cloud.google.com/artifact-registry [3] https://github.com/features/packages

You should have a shell alias to rapidly top up your auth token, just like with the Docker ECR. Short lived tokens are best practice, and a 12 hour TTL is reasonable. That’s no more than two auths in a day as a dev.

And every developer needs to have that alias. And all automation needs to be changed to call that command before trying to use pip, or mvn, or whatever. It sucks. No other hosted artifact repository does this.

Re: AWS CodeArtifact: A fully managed software artifact repository service

#16

Post by code4tee »

dahfizz wrote: post #4

I don't get it. The git server you use supports artifacts already. You could also just put all of your artifacts on an S3 bucket if you needed somewhere to put them, which is exactly what this is but more expensive. I don't understand when this would save you money or simplify devops.

Can occur in a VPC without direct internet access. For the average developer this isn’t usually an issue but in highly secure corporate environments this helps a lot. Can’t just do pip install X in such situations. Even the S3 proxy solutions often require many hoops from the security Jedi council before you can use any packages there.

A lot of people won’t find this useful but for some it’s a big blessing.

Re: AWS CodeArtifact: A fully managed software artifact repository service

#17

Post by toomuchtodo »

antoncohen wrote: post #15
toomuchtodo wrote: post #13

Earlier quoted context omitted.

You should have a shell alias to rapidly top up your auth token, just like with the Docker ECR. Short lived tokens are best practice, and a 12 hour TTL is reasonable. That’s no more than two auths in a day as a dev.

And every developer needs to have that alias. And all automation needs to be changed to call that command before trying to use pip, or mvn, or whatever. It sucks. No other hosted artifact repository does this.

It’s roughly a dozen lines of bash (error handling and all), speaking as someone who has had to maintain dev tooling for an org where Docker ECR was used, and can be checked into your project’s repo. It’s not onerous at all, either on devs or your build and deployment pipelines/runners.

Re: AWS CodeArtifact: A fully managed software artifact repository service

#18

Post by rantwasp »

dahfizz wrote: post #4

I don't get it. The git server you use supports artifacts already. You could also just put all of your artifacts on an S3 bucket if you needed somewhere to put them, which is exactly what this is but more expensive. I don't understand when this would save you money or simplify devops.

what git server is that?

Re: AWS CodeArtifact: A fully managed software artifact repository service

#19

Post by [deleted] »

antoncohen wrote: post #12

The login credentials expire after 12 hours (or less)[1], just like with their Docker registry (ECR). That makes it pretty annoying to use, especially on developer laptops. GCP has a similar offering[2]. And GitHub[3]. [1] https://docs.aws.amazon.com/codeartifact/latest/ug/python-co... [2] https://cloud.google.com/artifact-registry [3] https://github.com/features/packages

[deleted]

Re: AWS CodeArtifact: A fully managed software artifact repository service

#20

Post by [deleted] »

code4tee wrote: post #16
dahfizz wrote: post #4

I don't get it. The git server you use supports artifacts already. You could also just put all of your artifacts on an S3 bucket if you needed somewhere to put them, which is exactly what this is but more expensive. I don't understand when this would save you money or simplify devops.

Can occur in a VPC without direct internet access. For the average developer this isn’t usually an issue but in highly secure corporate environments this helps a lot. Can’t just do pip install X in such situations. Even the S3 proxy solutions often require many hoops from the security Jedi council before you can use any packages there. A lot of people won’t find this useful but for some it’s a big blessing.

[deleted]
Post reply on HN