ci.yml

name: AWS CodeBuild CI
on:
  pull_request:
  push:
  schedule:
    - cron: "0 0 * * *" # Daily at 00:00 UTC (4 PM PDT)

permissions:
  id-token: write
  contents: read

jobs:
  staticAnalysis:
    name: Static Analysis
    runs-on: ubuntu-latest
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
          aws-region: us-west-2
          role-duration-seconds: 3600
      - name: Run Static Analysis
        uses: aws-actions/aws-codebuild-run-build@v1
        timeout-minutes: 60
        with:
          project-name: AWS-ESDK-Java-CI
          buildspec-override: codebuild/ci/static-analysis.yml
          compute-type-override: BUILD_GENERAL1_MEDIUM
          image-override: aws/codebuild/amazonlinux2-x86_64-standard:3.0
  vectorTests:
    name: Vector Tests
    runs-on: ubuntu-latest
    strategy:
      fail-fast: true
      matrix:
        platform:
          - distribution: openjdk
            image: "aws/codebuild/standard:3.0"
          - distribution: corretto
            image: "aws/codebuild/amazonlinux2-x86_64-standard:3.0" # Corretto only runs on AL2
        version: [ 8, 11 ]
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
          aws-region: us-west-2
          role-duration-seconds: 3600
      - name: Vector Tests ${{ matrix.platform.distribution }}${{ matrix.version }}
        uses: aws-actions/aws-codebuild-run-build@v1
        timeout-minutes: 60
        with:
          project-name: AWS-ESDK-Java-CI
          buildspec-override: codebuild/ci/vectors-ci.yml
          compute-type-override: BUILD_GENERAL1_LARGE
          image-override: ${{ matrix.platform.image }}
          env-vars-for-codebuild: JAVA_ENV_VERSION
        env:
          JAVA_ENV_VERSION: ${{ matrix.platform.distribution }}${{ matrix.version }}
  vectorTestsMasterKeyProvider:
    name: Vector Tests MasterKeyProvider
    runs-on: ubuntu-latest
    strategy:
      fail-fast: true
      matrix:
        platform:
          - distribution: openjdk
            image: "aws/codebuild/standard:3.0"
          - distribution: corretto
            image: "aws/codebuild/amazonlinux2-x86_64-standard:3.0" # Corretto only runs on AL2
        version: [ 8, 11 ]
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
          aws-region: us-west-2
          role-duration-seconds: 3600
      - name: Vector Tests ${{ matrix.platform.distribution }}${{ matrix.version }}
        uses: aws-actions/aws-codebuild-run-build@v1
        timeout-minutes: 60
        with:
          project-name: AWS-ESDK-Java-CI
          buildspec-override: codebuild/ci/vectors-ci-mkp.yml
          compute-type-override: BUILD_GENERAL1_LARGE
          image-override: ${{ matrix.platform.image }}
          env-vars-for-codebuild: JAVA_ENV_VERSION
        env:
          JAVA_ENV_VERSION: ${{ matrix.platform.distribution }}${{ matrix.version }}
  netVectorTests:
    name: ESDK-NET Vector Tests
    runs-on: ubuntu-latest
    strategy:
      fail-fast: true
      matrix:
        platform:
          - distribution: openjdk
            image: "aws/codebuild/standard:3.0"
          - distribution: corretto
            image: "aws/codebuild/amazonlinux2-x86_64-standard:3.0" # Corretto only runs on AL2
        version: [ 8, 11 ]
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
          aws-region: us-west-2
          role-duration-seconds: 3600
      - name: Vector Tests ${{ matrix.platform.distribution }}${{ matrix.version }}
        uses: aws-actions/aws-codebuild-run-build@v1
        timeout-minutes: 60
        with:
          project-name: AWS-ESDK-Java-CI
          buildspec-override: codebuild/ci/net-vectors-ci.yml
          compute-type-override: BUILD_GENERAL1_LARGE
          image-override: ${{ matrix.platform.image }}
          env-vars-for-codebuild: JAVA_ENV_VERSION
        env:
          JAVA_ENV_VERSION: ${{ matrix.platform.distribution }}${{ matrix.version }}
  generateTestVectors:
    name: Generate Vectors
    runs-on: ubuntu-latest
    strategy:
      max-parallel: 1
      fail-fast: true
      matrix:
        platform:
          - distribution: openjdk
            image: "aws/codebuild/standard:3.0"
          - distribution: corretto
            image: "aws/codebuild/amazonlinux2-x86_64-standard:3.0" # Corretto only runs on AL2
        version: [ 8, 11 ]
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
          aws-region: us-west-2
          role-duration-seconds: 3600
      - name: Generate Test Vectors
        uses: aws-actions/aws-codebuild-run-build@v1
        timeout-minutes: 60
        with:
          project-name: AWS-ESDK-Java-CI
          buildspec-override: codebuild/ci/vectors-generator.yml
          compute-type-override: BUILD_GENERAL1_LARGE
          image-override: ${{ matrix.platform.image }}
          env-vars-for-codebuild: JAVA_ENV_VERSION
        env:
          JAVA_ENV_VERSION: ${{ matrix.platform.distribution }}${{ matrix.version }}
  releaseCI:
    name: Release CI
    runs-on: ubuntu-latest
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
          aws-region: us-west-2
          role-duration-seconds: 3600
      - name: Release CI
        uses: aws-actions/aws-codebuild-run-build@v1
        timeout-minutes: 60
        with:
          project-name: AWS-ESDK-Java-CI
          buildspec-override: codebuild/ci/release-ci.yml
          compute-type-override: BUILD_GENERAL1_LARGE
          image-override: aws/codebuild/standard:3.0
          env-vars-for-codebuild: GITHUB_EVENT_NAME
        env:
          GITHUB_EVENT_NAME: $GITHUB_EVENT_NAME
  validateCI:
    name: Validate CI
    runs-on: ubuntu-latest
    needs: releaseCI
    strategy:
      fail-fast: true
      matrix:
        platform:
          - distribution: openjdk
            image: "aws/codebuild/standard:3.0"
          - distribution: corretto
            image: "aws/codebuild/amazonlinux2-x86_64-standard:3.0" # Corretto only runs on AL2
        version: [ 8, 11 ]
    steps:
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v2
        with:
          role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
          aws-region: us-west-2
          role-duration-seconds: 3600
      - name: Validate CI ${{ matrix.platform.distribution }}${{ matrix.version }}
        uses: aws-actions/aws-codebuild-run-build@v1
        timeout-minutes: 60
        with:
          project-name: AWS-ESDK-Java-CI
          buildspec-override: codebuild/ci/validate-ci.yml
          compute-type-override: BUILD_GENERAL1_MEDIUM
          image-override: ${{ matrix.platform.image }}
          env-vars-for-codebuild: |
            JAVA_ENV_VERSION,
            JAVA_NUMERIC_VERSION,
            GITHUB_EVENT_NAME
        env:
          JAVA_ENV_VERSION: ${{ matrix.platform.distribution }}${{ matrix.version }}
          JAVA_NUMERIC_VERSION: ${{ matrix.version }}
          GITHUB_EVENT_NAME: $GITHUB_EVENT_NAME