Description

Codebuild generates deployable artifacts by compiling the source code, running unit tests, and generating deployable artifacts. Never save AWS access key ID or AWS secret access key authentication credentials in clear text, since this could result in data exposure and unauthorized access.

• 

  Recommended Mitigation

  It is recommended using Amazon EC2 Systems Manager Parameter Store or AWS Secrets Manager for CodeBuild, at the Codebuild environment variables. For more details: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html#fsbp-codebuild-2