AWS CodeArtifact: A fully managed software artifact repository service

Post by ludjer » Thu, Jun 11, 2020, 11:02 AM UTC

WatchDog wrote: post #3

This has been a fairly obvious service that has been missing for a while, nice to see them provide a solution. Most dependency management tools have some kind of hacky support for using S3 directly. Full fledged artifact management tools like Artifactory and Nexus support S3 backed storage. Interesting to see that the pricing is approximately double that of S3, for what I imagine is not much more than a thin layer on…

Post by nerdjon » Thu, Jun 11, 2020, 11:30 AM UTC

nickjj wrote: post #56

blaisio wrote: post #23

Earlier quoted context omitted.

I could not disagree more re. the expiring credentials. It is a bad practice to have credentials that never expire, especially on developer laptops, especially credentials of this nature. Developers frequently store this stuff in plain text in their home directory or as environment variables. That's a huge security risk! This service manages the process of generating and expiring credentials automatically, which is a…

> I could not disagree more re. the expiring credentials. It is a bad practice to have credentials that never expire, especially on developer laptops, especially credentials of this nature. For the specific use case of the developer box and the Docker registry, resetting the credentials every 12 hours doesn't offer any more security than not on its own. The reason for that is after you try to login to ECR after the e…

Post by ludjer » Thu, Jun 11, 2020, 12:43 PM UTC

owenmarshall wrote: post #62

ludjer wrote: post #61

Earlier quoted context omitted.

Considering the price of Nexus and Artifactory this is way cheaper for a SAAS offering with SLA's. I imagine Artifactory is really going to have to up their product offering or at least lower their entry prices.

Meta: I’ve vouched for your killed comment. I suspect you may be shadowbanned.

Post by cremp » Thu, Jun 11, 2020, 1:12 PM UTC

StreamBright wrote: post #57

WatchDog wrote: post #3

This has been a fairly obvious service that has been missing for a while, nice to see them provide a solution. Most dependency management tools have some kind of hacky support for using S3 directly. Full fledged artifact management tools like Artifactory and Nexus support S3 backed storage. Interesting to see that the pricing is approximately double that of S3, for what I imagine is not much more than a thin layer on…

We have used S3 successfully several times. You can create a Maven repository, use it as RPM repo and many other use cases to host artifacts. I am not sure what functionality is missing that cannot be implemented on the top of S3 and requires CodeArtifact.

Post by StreamBright » Thu, Jun 11, 2020, 1:44 PM UTC

cremp wrote: post #67

StreamBright wrote: post #57

Earlier quoted context omitted.

We have used S3 successfully several times. You can create a Maven repository, use it as RPM repo and many other use cases to host artifacts. I am not sure what functionality is missing that cannot be implemented on the top of S3 and requires CodeArtifact.

For maven, to push artifacts via the correct mvn deploy:deploy-file requires a S3 wagon (transport layer) software to actually make the S3 calls. For bigger orgs, having everyone use a wagon is a non-starter. All I'm seeing this does is give the proper http endpoints so you dont need the wagon. Is it worth ~2x the price, no, but it's better than the other enterprise-y solutions.