As a version control system, AWS CodeCommit has basic branching and allows to have pull requests. It integrates with multiple solutions within AWS. There's a code pipeline that we use for our CI/CD pipelines, and it stays within AWS. It's secure because it stays on S3. We integrate it with a KMS-based key for encryption. It is over HTTPS, and most of the developers use that. We use AWS extensively for everything, and we use IAM for permissions. Since it's all centralized for us, we don't need to look at multiple tools. They have encryption at rest and HTTPS-based access. Since we have the credentials in IAM, we enforce our policies from there and decide who has access to what and pull requests. Not everybody can push to the main branch. The solution has those primary things that you would want from security. We do static code analysis using AWS CodeGuru, the service we use for code reviews. AWS CodeCommit is a typical Git-based version control system. Using it from a developer or sysadmin standpoint needs no new learning curve if you already know Git. You can use the solution if you are already aware of the basics of AWS, such as IAM. AWS documentation is so good that we've never had to contact the technical support team for anything. I would recommend the solution to other users because it's a fairly easy tool to set up and use. If you are on AWS, it makes sense for you to use it because you get everything in one cloud instead of working with multiple third-party providers. Overall, I rate the solution nine and a half out of ten.
