Checks if an AWS CodeBuild project environment has privileged mode enabled. The rule is NON_COMPLIANT for a CodeBuild project if ‘privilegedMode’ is set to ‘true’.

This config rule supports the following parameters:

  • exemptedProjects
    • Required: No
    • Type: CSV
    • Description:Comma-separated list of CodeBuild project names that are allowed to have ‘privilegedMode’ with value ‘true’.

CloudFormation Template