Advisories for Pypi/Aws-Cdk.aws-Codebuild package

2026

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting encrypted: true on the S3LoggingOptions property of an AWS CodeBuild project construct produces the opposite of the intended behavior, disabling encryption on CodeBuild build logs stored in S3.