AWS SAM 実践 - CI/CD パイプライン | CodePipeline でサーバーレスを自動デプロイ！

# ステップ 1: 各ステージ用のリソースを作成
sam pipeline bootstrap

# ステップ 2: パイプライン設定ファイルを生成
sam pipeline init

# または、一括で実行する場合
sam pipeline init --bootstrap

$ sam pipeline bootstrap --stage dev

sam pipeline bootstrap generates the required AWS infrastructure resources to connect
to your CI/CD system. This step must be run for each deployment stage in your pipeline,
prior to running the sam pipeline init command.

We will ask for [2] stage definition, [4] account details, and
[5] references to existing resources in order to bootstrap these pipeline resources.

[2] Stage definition
Stage name [dev]: dev

[4] Account details
The following AWS credential sources are available to use.
To learn more about the credential sources, visit:
https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html
1 - Environment variables
2 - default (named profile)
q - quit
Select a credential source to associate with this stage: 2
Select a region: ap-northeast-1

[5] Reference application build resources
Enter the pipeline IAM user ARN if you have previously created one, or we will create one for you []:

[6] Summary
Below is the summary of the answers:
1 - Account: 123456789101
2 - Stage: dev
3 - Region: ap-northeast-1
4 - Pipeline user: [to be created]
5 - Pipeline execution role: [to be created]
6 - CloudFormation execution role: [to be created]
7 - Artifacts bucket: [to be created]
8 - ECR image repository: [skipped]

Press enter to confirm the values above, or select an item to edit the value:

This will create the following required resources for the 'dev' environment:
- Pipeline IAM user
- Pipeline execution role
- CloudFormation execution role
- Artifact bucket

Should we proceed with the creation? [y/N]: y

Creating the required resources...
Successfully created!

The following resources were created in your account:
- Pipeline IAM user
- Pipeline execution role
- CloudFormation execution role
- Artifact bucket

Pipeline IAM user credential:
AWS_ACCESS_KEY_ID: AAAAAAAAAAAAAAA
AWS_SECRET_ACCESS_KEY: ****************************************

View the summary of your pipeline resources at: .aws-sam/pipeline/pipelineconfig.toml

# CodeCommit リポジトリの作成
aws codecommit create-repository \
--repository-name sam-app \
--repository-description "SAM アプリケーション用リポジトリ"

# HTTPS でクローン（Git 認証情報が必要）
git clone https://git-codecommit.ap-northeast-1.amazonaws.com/v1/repos/sam-app

# SSH でクローン（SSH キーの設定が必要）
git clone ssh://git-codecommit.ap-northeast-1.amazonaws.com/v1/repos/sam-app

- Name: ApprovalStage
  Actions:
  - Name: ManualApproval
    ActionTypeId:
      Category: Approval
      Owner: AWS
      Provider: Manual
      Version: "1"
    Configuration:
      CustomData: "本番環境へデプロイしてよろしいですか？"

sam deploy -t codepipeline.yaml \
--stack-name sam-app-pipeline \
--capabilities CAPABILITY_IAM \
--region ap-northeast-1

$ sam deploy -t codepipeline.yaml --stack-name sam-cicd-pipeline --capabilities CAPABILITY_IAM --region ap-northeast-1

Managed S3 bucket: aws-sam-cli-managed-default-samclisourcebucket-xxxxx
A]different default S3 bucket can be set in samconfig.toml

Deploying with following values
===============================
Stack name                   : sam-cicd-pipeline
Region                       : ap-northeast-1
Confirm changeset            : False
Disable rollback             : False
Deployment s3 bucket         : aws-sam-cli-managed-default-samclisourcebucket-xxxxx
Capabilities                 : ["CAPABILITY_IAM"]
Parameter overrides          : {}
Signing Profiles             : {}

Initiating deployment
=====================
Waiting for changeset to be created..

CloudFormation stack changeset
-----------------------------------------------------------------------------------------------------------------------------
Operation                     LogicalResourceId                    ResourceType                        Replacement
-----------------------------------------------------------------------------------------------------------------------------
+ Add                         CodeBuildProjectBuildAndPackage      AWS::CodeBuild::Project             N/A
+ Add                         CodeBuildProjectDeploy               AWS::CodeBuild::Project             N/A
+ Add                         CodeBuildServiceRole                 AWS::IAM::Role                      N/A
+ Add                         CodePipelineExecutionRole            AWS::IAM::Role                      N/A
+ Add                         CodeStarConnection                   AWS::CodeStarConnections::Connection N/A
+ Add                         Pipeline                             AWS::CodePipeline::Pipeline         N/A
+ Add                         PipelineStackCloudFormationRole      AWS::IAM::Role                      N/A
-----------------------------------------------------------------------------------------------------------------------------
Changeset created successfully. arn:aws:cloudformation:ap-northeast-1:123456789101:changeSet/samcli-deploy-xxxxx

2026-01-13 13:XX:XX - Waiting for stack create/update to complete

CloudFormation events from stack operations (most recent last)
-----------------------------------------------------------------------------------------------------------------------------
ResourceStatus                ResourceType                  LogicalResourceId                    ResourceStatusReason
-----------------------------------------------------------------------------------------------------------------------------
CREATE_IN_PROGRESS            AWS::IAM::Role                CodeBuildServiceRole                 -
CREATE_IN_PROGRESS            AWS::IAM::Role                CodePipelineExecutionRole            -
CREATE_COMPLETE               AWS::IAM::Role                CodeBuildServiceRole                 -
CREATE_COMPLETE               AWS::IAM::Role                CodePipelineExecutionRole            -
CREATE_IN_PROGRESS            AWS::CodeBuild::Project       CodeBuildProjectBuildAndPackage      -
CREATE_IN_PROGRESS            AWS::CodeBuild::Project       CodeBuildProjectDeploy               -
CREATE_COMPLETE               AWS::CodeBuild::Project       CodeBuildProjectBuildAndPackage      -
CREATE_COMPLETE               AWS::CodeBuild::Project       CodeBuildProjectDeploy               -
CREATE_IN_PROGRESS            AWS::CodePipeline::Pipeline   Pipeline                             -
CREATE_COMPLETE               AWS::CodePipeline::Pipeline   Pipeline                             -
CREATE_COMPLETE               AWS::CloudFormation::Stack    sam-cicd-pipeline                    -
-----------------------------------------------------------------------------------------------------------------------------
Successfully created/updated stack - sam-cicd-pipeline in ap-northeast-1

[dev.deploy.parameters]
stack_name = "sam-app-dev"
[prd.deploy.parameters]
stack_name = "sam-app-prd"

# CodeCommit リポジトリにリモートを設定（初回のみ）
git remote add origin https://git-codecommit.ap-northeast-1.amazonaws.com/v1/repos/sam-app

# コードをコミット
git add .
git commit -m "Add CI/CD pipeline configuration"

# CodeCommit へプッシュ
git push origin main

$ curl https://5ey1xgu8n0.execute-api.ap-northeast-1.amazonaws.com/Prod/hello/
  {"message": "hello world"}

$ curl https://n30qguzrq2.execute-api.ap-northeast-1.amazonaws.com/Prod/hello/
  {"message": "hello world"}