Introduction

There are several ways to use Synopsys products in an Amazon Web Services (AWS) environment.

Black Duck can be easily deployed in an Amazon Machine Image (AMI) in Amazon's Elastic Compute Cloud (EC2).

You can use Synopsys's scanning technology in a variety of Amazon continuous integration environments by using Synopsys Detect.

Synopsys Detect can be invoked from Amazon CodeBuild and CodePipeline to invoke either a Black Duck or Coverity on Polaris scan.
Synopsys Detect can also be used to perform Black Duck scans of containers in Amazon's Elastic Container Registry (ECR).

Black Duck scan results and events

Black Duck scan results are sent to your dedicated Black Duck instance, providing vulnerability, license, and operational risk results on the open source software components that are identified in the scans.
Black Duck events can be displayed in the AWS CodeStar console using the Black Duck Jira Plugin.
Coverity on Polaris scan results are available in Polaris.

Refer to the following to learn about deploying Black Duck AMI in AWS.

Refer to the following topics for information about triggering Synopsys scans in AWS by leveraging Synopsys Detect.