Amazon Web Services (AWS) has released its wholly managed software artifact repository service AWS CodeArtifact across multiple AWS regions.
Image source: TheRegister
The service allows for the creation of centralized repositories for sharing software packages that have been approved for use across development teams.
Package repository managers are an integral part of today's development process. Developers need libraries in their projects, which requires surprisingly complicated tooling to support a myriad of dependency standards, different metadata, elaborate repository organization, and infrastructure for quality and security gates in the pipeline. AWS CodeArtifact enables easy access to the latest version of a vast number of open-source libraries and some repository organization features, making it a good start.
Images source: JFrog Artifactory
Artifactory supports 26 languages and many other facts that can make it look like a hard competitor.
- Universal solution supporting all major package formats (including Docker, no need to have a separate Docker Registry)
- Integrates with all CI/CD tools
- Custom API-driven automation
- Extensive CLI for uploading and downloading artifacts
- Support for hybrid & multi-cloud environments
- Replication - ensures locality in any network topology
- Immediate (thanks to checksum-based storage) metadata-based promotion between repositories
- Enriched implicit, explicit and custom metadata
- Security vulnerability and license compliance scanning
- Artifactory Query Language
Image source: Sonatype Nexus
- Universal support for all popular build tools
- Repository health checks
- Ability to deploy directly to a desired repository with your choice of build
- SAML/SSO authentication for enhanced security
- Compatible with popular DevOps tools like Eclipse, IntelliJ, Hudson, Jenkins, Puppet, Chef, Docker, and more.
AWS might be releasing this solution as part of a product completeness project. By adding CodeArtifact, AWS seems to fill a gap it lacked for years. But, we still need to see if it’s profitable for them to create such an alternative to much more complete artifact managers in the industry today like Artifactory or Nexus. What do you think?