Key points

• Stores approved package versions and can participate in dependency resolution.
• Build roles require scoped repository and authorization-token permissions.
• Package provenance and pinning remain necessary even when the repository is managed.

Best-known use cases

• Share private application packages.
• Provide controlled dependencies to CodeBuild and local development workflows.

What candidates often confuse it with

• CodeArtifact stores language packages; ECR stores container images.
• CodeArtifact supplies dependencies; CodeBuild executes build and test commands.

Key takeaway

Use CodeArtifact for controlled package distribution, not as a source repository or container registry.

Related services

• AWS CodeBuild
• Amazon Elastic Container Registry (Amazon ECR)

Relevant exam tasks

• D3.1 — Prepare application artifacts to be deployed to AWS
• 3.1.1 — Manage the dependencies of the code module (for example, environment variables, configuration files, container images) within the package
• 3.1.3 — Use code repositories in deployment environments

Learn more

• AWS CodeArtifact