- The pair and the pill say what connects to what, and how, before anyone reads a word. The pill is production's label, word for word.
- The mock shows Amazon CodeCommit as a deposit source in the app, with the Software Resilience Certificate and, on a Pro level, a change flagged since the last rebuild (monitoring between runs). Example values and fictional names.
- Logos: the Amazon CodeCommit logo is production's file. Platform logos name the integration here; check Amazon CodeCommit's brand guidelines before launch.
- Integration count: production says "50+" (hub FAQ, product pages), but only 24 integration pages exist and its hub grid shows 41 cards (40 platforms). The kit keeps "50+" flagged everywhere and states no other count; reconcile the figure sitewide before launch.
Codekeeper + Amazon CodeCommit
Connect Amazon CodeCommit once and your deposit keeps pace with the code you ship. When you need to recover, you start from the version you run, not one from months ago.
- Trusted by 3,500+ teams
- ISO/IEC 27001:2022 certified
- Connected with access you control
At a glance
Amazon CodeCommit and Codekeeper, in six facts.
- Connection method
- Custom integration, with an IAM policy and user
- What it deposits
- The CodeCommit repositories you select
- How often it syncs
- Daily, automatically
- Works with
- Every protection: Escrow, Resilience, Continuity and Backup
- Set up by
- Whoever holds the code: usually the vendor's tech team, or yours for an in-house application
- Manual alternative
- Secure Upload, in the Codekeeper app
Set up
Connect Amazon CodeCommit in six steps.
You'll find the same steps in the Codekeeper app when you activate the integration.
What you'll need
- Access to your AWS account, to create an IAM policy and a user
- The credentials you generate there (a username and password)
- An active protection in Codekeeper. For Escrow, deposits open once every party has signed the agreement.
Activate the integration
In the Codekeeper app, select Activate on the Amazon CodeCommit integration.

Create an IAM policy
In your AWS account, create a new IAM policy for Codekeeper.

Set the access levels
Apply the access levels listed in the in-app instructions.

Add a user
Add a user with the required credential type, and attach the policy to that user.

Generate the credentials
Generate the credentials, then copy the username and password.

Enter the credentials in Codekeeper
Return to Codekeeper and enter the credentials in the fields provided.

Security
How the connection stays secure.
Access you define in AWS
You create the IAM policy and user in your own AWS account, with the access levels the integration needs, and enter the credentials in Codekeeper once.
Encrypted in transit and at rest
Traffic between Amazon CodeCommit and Codekeeper is encrypted with TLS, and deposits are encrypted at rest with AES-256.
Certified security
Codekeeper is ISO/IEC 27001:2022 certified, audited by BSI. Policies and audit summaries are in the Trust Center.
Prefer to upload by hand? Use Secure Upload.
Upload files straight to your deposit from the Codekeeper app, with nothing to connect. Amazon CodeCommit keeps the deposit current on its own; a manual upload stays as it is until you upload again, so you can use both.
Why it matters
A current deposit is one you can recover from.
Recovery starts from what's in the deposit. Keeping it in step with Amazon CodeCommit means the version we hold is the version you run.
Kept in step
Changes in Amazon CodeCommit reach the deposit daily, without anyone remembering to upload them.
Checked and certified
Every protection includes an automated check of what's deposited, with a vault report and a Software Resilience Certificate.
Rebuilt to prove it
With Escrow Pro, Resilience Pro and Continuity Pro, Agentic Verification rebuilds the deposit in the Codekeeper AI Verification Lab, with four rebuilds a year that you start, and issues a Recoverability Certificate.
Changes flagged between runs
On those levels, we also compare the deposit with your live repositories and flag what changed, so you know when to rebuild.
Related integrations
Codekeeper also connects with.
More integrations, plus Secure Upload for anything else. See all integrations
Sample evidence pack
See what your auditor would receive.
An anonymised set of outputs from a real Agentic Verification run, so you can judge the evidence before you talk to us.
- Recoverability Certificate
- Run report
- SBOM and Exit workbook excerpts
Questions
Before you connect Amazon CodeCommit.
How often does the deposit update?
The integration checks Amazon CodeCommit for changes daily and adds them to the deposit, with no per-deposit fees. You can also add files by hand at any time with Secure Upload.
What exactly gets deposited?
The CodeCommit repositories you select. You choose each one when you connect, and repeat for every one the deposit needs. The agreement lists what should be deposited, and the automated check confirms what's there.
What access does Codekeeper need?
An IAM policy and user that you create, with the access the in-app instructions list. You enter it in Codekeeper once.
When can we start depositing?
As soon as the protection is active. For Escrow, deposits open once every party has signed the agreement.
Does a connected integration prove we could recover?
It keeps the deposit current, which is where any recovery starts. The proof comes from the automated check and the Software Resilience Certificate, and with Escrow Pro, Resilience Pro or Continuity Pro, from Agentic Verification: a rebuild in the Codekeeper AI Verification Lab and a Recoverability Certificate.
Keep your Amazon CodeCommit deposit ready to recover.
Book a demo and we'll walk through the connection with you. Not ready to talk? See the evidence a rebuild produces.