Use an `AWS::CodeStarConnections::Connection` for connecting an `AWS::Amplify::App` to an external repository

[mbarneyjr]

I'd like to be able to connect my Amplify Apps to GitHub via a CodeStarConnection resource, rather than passing a GitHub token secret through CloudFormation.

So when provisioning an Amplify App via CloudFormation, it could look like this:

  AmplifyApp:
    Type: AWS::Amplify::App
    Properties:
      ...
      ConnectionArn: arn:aws:codestar-connections:us-east-1:012012012012:connection/abc123
      # AccessToken: abc123
      # OauthToken: abc123

Or via the API

$ aws amplify create-app ... --connection-arn arn:aws:codestar-connections:us-east-1:012012012012:connection/abc123

[bjudson1]

yes this is needed! an automatic connection between the status of the amplify app deployment and github checks

[dnalbach]

Agreed, would like to see CodeStarConnection available for Amplify so existing enterprise connections to external providers can be reused.

[bsnyder74]

I need this as well. Any update on when this capability will ever be made available?

[Franklin08]

Yes, I need this feature as well, any idea when this will be made available?

[waynet-ihm]

am I missing a trick here? seems logical to me that this would be the preferred way to connect and it still is missing. Can someone from AWS give us an answer why it is still not a feature and or when it may become one. Going through the console doesn't ask for tokens, it installs Apps.

..... 5000 minutes later ....

ok, so some digging got me here Deep in the docs

Seems the PAT is required to install the GitHubApp, they don't keep the PAT after installing the GitHubApp but the PAT is required if any updates are needed. One might think that maybe the PAT can be replaced with "xyz" after the initial deploy and maybe unless some change is required forcing the CF to do an update, we don't need a real PAT.

It would just be nicer if we could reference an already installed GitHubApp or CodeStarConnection negating the need for keeping PATs handy in case we push a change to the Amplify App.

Took me a few days to stumble on this - that could be made easier too.

[RyogaK]

In our environment, the use of PAT is strictly limited for security reasons. In such a situation, the inability to reuse CodeStarConnection poses a critical obstacle. We strongly request a mechanism to manage and reuse CodeStar independently, similar to CodeBuild.