Developer Tools
AWS CodeArtifact
AWS CodeArtifact is a managed package repository for language package formats such as npm, Maven, PyPI, and NuGet. It helps GenAI builds consume approved libraries and publish internal SDKs through controlled domains and repositories.
Key points
- Upstream repositories can proxy public or internal package sources
- Repository policies and IAM control publishing and consumption
- Short-lived authorization tokens reduce persistent credential exposure
When to use it
- Distribute a vetted prompt-evaluation library
- Pin an internal agent-tool SDK used by multiple teams
Exam tips
- Use CodeArtifact for software packages; ECR stores container images and S3 stores arbitrary artifacts
- Lock dependency versions and scan packages because a private repository does not make upstream code trustworthy