For my CodeBuild projects, I have a dev, staging and production project. Each project has an environment variable called $BUILD_ENVIRONMENT set to dev, staging and production, respectively. Each stage has its own key/value pair in Systems Manager Parameter Store. I want to use one buildspec.yml across all branches, so if I try to merge a branch or checkout a new branch, it does not copy hardcoded values in buildspec.yml. This is what I tried to do:
version: 0.2 env: parameter-store: SECRET_KEY_BASE: /myproject/$BUILD_ENVIRONMENT/secret_key_base
But it doesn't work. There is no interpolation done and I get the following error:
Decrypted Variables Error Message: parameter does not exist: /myproject/$BUILD_ENVIRONMENT/secret_base_key
Since this is such a common use case, I am wondering if anyone found any type of solution to this?