Introduction

There are several ways to use Synopsys products in an Amazon Web Services (AWS) environment.

• Black Duck can be easily deployed in an Amazon Machine Image (AMI) in Amazon's Elastic Compute Cloud (EC2). 
• All or part of the OpsSight solution (Black Duck and/or OpsSight Connector) can be deployed in Amazon's Elastic Container Service for Kubernetes.

You can use Synopsys's scanning technology in a variety of Amazon continuous integration environments by using Synopsys Detect.

• Synopsys Detect can be invoked from Amazon CodeBuild and CodePipeline to invoke either a Black Duck or Coverity on Polaris scan.
• Synopsys Detect can also be used to perform Black Duck scans of containers in Amazon's Elastic Container Registry (ECR).

Black Duck scan results and events

• Black Duck scan results are sent to your dedicated Black Duck instance, providing vulnerability, license, and operational risk results on the open source software components that are identified in the scans.
• Black Duck events can be displayed in the AWS CodeStar console using the Black Duck Jira Plugin. 
• Coverity on Polaris scan results are available in Polaris.

Refer to the following links for more information about how to use Synopsys products in an AWS environment.

References

• Deploying Black Duck and OpsSight in AWS
  • Deploying a Black Duck AMI on AWS
  • Deploying Black Duck and OpsSight in Amazon EKS
• Scanning in AWS with Synopsys Detect
  • Scanning in AWS CodeBuild and CodePipeline by using Synopsys Detect
    • Calling Synopsys Detect from AWS CodeBuild
      • Examples of buildspec.yml and Synopsys Detect invocation syntax
      • Calling Synopsys Detect from AWS CodeBuild by using the AWS command-line interface
      • Invoking AWS CodeBuild from Jenkins
    • Calling Synopsys Detect from AWS CodePipeline using a custom action
      • Calling Synopsys Detect from AWS CodePipeline using the AWS command-line interface
      • Calling Synopsys Detect from AWS CodePipeline by using the AWS console UI
    • Creating a configuration YAML for Coverity on Polaris
  • Scanning images in Amazon Elastic Container Registry (ECR)
  • Adding Synopsys Credentials to AWS Parameter Store
  • Black Duck AWS CodeStar