ReadonlyconnectionARN of the AWS CodeConnections connection.
Important: This connection requires a one-time OAuth handshake via the
AWS Console before it can be used. After creating the connection resource
(via CDK, CLI, or Console), you must complete the OAuth flow in the
Console under Developer Tools → Connections — the connection will be
in PENDING status until authorized.
Steps:
AVAILABLE — the pipeline can now pull source'arn:aws:codeconnections:us-east-1:123456789:connection/abc-def'
Accepts a `config('CONNECTION_ARN')` marker (SSM) to keep the ARN out of
source. It is resolved at **synth time** and inlined as a literal into the
template (the CodePipeline service needs a literal ARN), so this requires the
async `await Pipeline.create(...)` path. A `secret()` is intentionally **not**
accepted here: a synth-inlined value lands in the template, which would defeat
the point of a secret — and a connection ARN is a reference, not a credential.
ReadonlyrepoRepository in owner/repo format.
Optional ReadonlytriggerPath-based trigger filters for monorepo support.
When specified, the pipeline only triggers on pushes that modify files matching these path patterns. Useful for monorepos where multiple pipelines share a single repository.
Optional ReadonlytriggerWhether to trigger the pipeline on push to the branch.
Configuration for the pipeline source (GitHub/CodeConnections).
Uses AWS CodeConnections (formerly CodeStar Connections) for OAuth-based access to GitHub repositories. No token management required — the connection is created once via the AWS Console.