AWS CodeDeploy Management Skill
Analyze and manage AWS CodeDeploy applications, deployment groups, and deployment history.
MANDATORY: Discovery-First Pattern
Always list applications before querying specific resources.
Phase 1: Discovery
#!/bin/bash
export AWS_PAGER=""
echo "=== CodeDeploy Applications ==="
aws deploy list-applications --output text --query 'applications[]'
echo ""
echo "=== Application Details ==="
for app in $(aws deploy list-applications --output text --query 'applications[]'); do
aws deploy get-application --application-name "$app" --output text \
--query 'application.[applicationName,computePlatform,createTime]' &
done
wait
echo ""
echo "=== Deployment Groups ==="
for app in $(aws deploy list-applications --output text --query 'applications[]'); do
for dg in $(aws deploy list-deployment-groups --application-name "$app" --output text --query 'deploymentGroups[]'); do
aws deploy get-deployment-group --application-name "$app" --deployment-group-name "$dg" --output text \
--query "deploymentGroupInfo.[\"$app\",deploymentGroupName,deploymentConfigName,computePlatform]" &
done
done
wait
echo ""
echo "=== Deployment Configurations ==="
aws deploy list-deployment-configs --output text --query 'deploymentConfigsList[]'
Phase 2: Analysis
#!/bin/bash
export AWS_PAGER=""
echo "=== Recent Deployments ==="
for app in $(aws deploy list-applications --output text --query 'applications[]'); do
deploy_ids=$(aws deploy list-deployments --application-name "$app" --max-items 5 --output text --query 'deployments[]')
if [ -n "$deploy_ids" ]; then
for dep_id in $deploy_ids; do
aws deploy get-deployment --deployment-id "$dep_id" --output text \
--query "deploymentInfo.[deploymentId,applicationName,deploymentGroupName,status,createTime]" &
done
fi
done
wait | head -25
echo ""
echo "=== Failed Deployments ==="
for app in $(aws deploy list-applications --output text --query 'applications[]'); do
failed=$(aws deploy list-deployments --application-name "$app" \
--include-only-statuses Failed --max-items 3 --output text --query 'deployments[]')
for dep_id in $failed; do
aws deploy get-deployment --deployment-id "$dep_id" --output text \
--query "deploymentInfo.[deploymentId,applicationName,status,errorInformation.code,errorInformation.message]" &
done
done
wait | head -15
echo ""
echo "=== Deployment Group Health ==="
for app in $(aws deploy list-applications --output text --query 'applications[]'); do
for dg in $(aws deploy list-deployment-groups --application-name "$app" --output text --query 'deploymentGroups[]'); do
aws deploy get-deployment-group --application-name "$app" --deployment-group-name "$dg" --output text \
--query "deploymentGroupInfo.[applicationName,deploymentGroupName,lastSuccessfulDeployment.deploymentId,lastSuccessfulDeployment.status,lastSuccessfulDeployment.createTime]" &
done
done
wait
Output Format
- Target ≤50 lines per output
- Use
--output text --query for all commands
- Tab-delimited fields: AppName, DeploymentGroup, DeploymentId, Status
- Aggregate deployment counts by status for busy applications
- Never dump full revision details -- show deployment metadata only
Anti-Hallucination Rules
- NEVER assume resource names — always discover via CLI/API in Phase 1 before referencing in Phase 2.
- NEVER fabricate metric names or dimensions — verify against the service documentation or
--help output.
- NEVER mix CLI commands between service versions — confirm which version/API you are targeting.
- ALWAYS use the discovery → verify → analyze chain — every resource referenced must have been discovered first.
- ALWAYS handle empty results gracefully — an empty response is valid data, not an error to retry.
Counter-Rationalizations
| Shortcut |
Counter |
Why |
| "I'll skip discovery and check known resources" |
Always run Phase 1 discovery first |
Resource names change, new resources appear — assumed names cause errors |
| "The user only asked for a quick check" |
Follow the full discovery → analysis flow |
Quick checks miss critical issues; structured analysis catches silent failures |
| "Default configuration is probably fine" |
Audit configuration explicitly |
Defaults often leave logging, security, and optimization features disabled |
| "Metrics aren't needed for this" |
Always check relevant metrics when available |
API/CLI responses show current state; metrics reveal trends and intermittent issues |
| "I don't have access to that" |
Try the command and report the actual error |
Assumed permission failures prevent useful investigation; actual errors are informative |
Common Pitfalls
- Deployment status values: Created, Queued, InProgress, Baking, Succeeded, Failed, Stopped, Ready
- Compute platforms: Server (EC2/On-prem), Lambda, ECS -- each has different deployment group config
- Deployment configs: CodeDeployDefault.OneAtATime, HalfAtATime, AllAtOnce, and custom configs
- Rollback config: Check
autoRollbackConfiguration -- can trigger on DEPLOYMENT_FAILURE or DEPLOYMENT_STOP_ON_ALARM
- Blue/Green vs In-Place: Check
deploymentStyle -- Blue/Green requires load balancer config
- Target revision: Verify
targetRevision in deployment group points to correct S3/GitHub location
- Instance health: For EC2, check
instanceSummary with deployment ID for per-instance status
1---2name: managing-aws-codedeploy3description: Use when working with Aws Codedeploy — aWS CodeDeploy application and deployment management. Covers applications, deployment groups, deployment history, deployment configurations, instance health, target revisions, and rollback settings. Use when inspecting deployments, debugging failed deployments, reviewing deployment strategies, or auditing deployment group configurations.4---56# AWS CodeDeploy Management Skill78Analyze and manage AWS CodeDeploy applications, deployment groups, and deployment history.910## MANDATORY: Discovery-First Pattern1112**Always list applications before querying specific resources.**1314### Phase 1: Discovery1516```bash17#!/bin/bash18export AWS_PAGER=""1920echo "=== CodeDeploy Applications ==="21aws deploy list-applications --output text --query 'applications[]'2223echo ""24echo "=== Application Details ==="25for app in $(aws deploy list-applications --output text --query 'applications[]'); do26 aws deploy get-application --application-name "$app" --output text \27 --query 'application.[applicationName,computePlatform,createTime]' &28done29wait3031echo ""32echo "=== Deployment Groups ==="33for app in $(aws deploy list-applications --output text --query 'applications[]'); do34 for dg in $(aws deploy list-deployment-groups --application-name "$app" --output text --query 'deploymentGroups[]'); do35 aws deploy get-deployment-group --application-name "$app" --deployment-group-name "$dg" --output text \36 --query "deploymentGroupInfo.[\"$app\",deploymentGroupName,deploymentConfigName,computePlatform]" &37 done38done39wait4041echo ""42echo "=== Deployment Configurations ==="43aws deploy list-deployment-configs --output text --query 'deploymentConfigsList[]'44```4546### Phase 2: Analysis4748```bash49#!/bin/bash50export AWS_PAGER=""5152echo "=== Recent Deployments ==="53for app in $(aws deploy list-applications --output text --query 'applications[]'); do54 deploy_ids=$(aws deploy list-deployments --application-name "$app" --max-items 5 --output text --query 'deployments[]')55 if [ -n "$deploy_ids" ]; then56 for dep_id in $deploy_ids; do57 aws deploy get-deployment --deployment-id "$dep_id" --output text \58 --query "deploymentInfo.[deploymentId,applicationName,deploymentGroupName,status,createTime]" &59 done60 fi61done62wait | head -256364echo ""65echo "=== Failed Deployments ==="66for app in $(aws deploy list-applications --output text --query 'applications[]'); do67 failed=$(aws deploy list-deployments --application-name "$app" \68 --include-only-statuses Failed --max-items 3 --output text --query 'deployments[]')69 for dep_id in $failed; do70 aws deploy get-deployment --deployment-id "$dep_id" --output text \71 --query "deploymentInfo.[deploymentId,applicationName,status,errorInformation.code,errorInformation.message]" &72 done73done74wait | head -157576echo ""77echo "=== Deployment Group Health ==="78for app in $(aws deploy list-applications --output text --query 'applications[]'); do79 for dg in $(aws deploy list-deployment-groups --application-name "$app" --output text --query 'deploymentGroups[]'); do80 aws deploy get-deployment-group --application-name "$app" --deployment-group-name "$dg" --output text \81 --query "deploymentGroupInfo.[applicationName,deploymentGroupName,lastSuccessfulDeployment.deploymentId,lastSuccessfulDeployment.status,lastSuccessfulDeployment.createTime]" &82 done83done84wait85```8687## Output Format8889- Target ≤50 lines per output90- Use `--output text --query` for all commands91- Tab-delimited fields: AppName, DeploymentGroup, DeploymentId, Status92- Aggregate deployment counts by status for busy applications93- Never dump full revision details -- show deployment metadata only9495## Anti-Hallucination Rules96971. **NEVER assume resource names** — always discover via CLI/API in Phase 1 before referencing in Phase 2.982. **NEVER fabricate metric names or dimensions** — verify against the service documentation or `--help` output.993. **NEVER mix CLI commands between service versions** — confirm which version/API you are targeting.1004. **ALWAYS use the discovery → verify → analyze chain** — every resource referenced must have been discovered first.1015. **ALWAYS handle empty results gracefully** — an empty response is valid data, not an error to retry.102103## Counter-Rationalizations104105| Shortcut | Counter | Why |106|----------|---------|-----|107| "I'll skip discovery and check known resources" | Always run Phase 1 discovery first | Resource names change, new resources appear — assumed names cause errors |108| "The user only asked for a quick check" | Follow the full discovery → analysis flow | Quick checks miss critical issues; structured analysis catches silent failures |109| "Default configuration is probably fine" | Audit configuration explicitly | Defaults often leave logging, security, and optimization features disabled |110| "Metrics aren't needed for this" | Always check relevant metrics when available | API/CLI responses show current state; metrics reveal trends and intermittent issues |111| "I don't have access to that" | Try the command and report the actual error | Assumed permission failures prevent useful investigation; actual errors are informative |112113## Common Pitfalls114115- **Deployment status values**: Created, Queued, InProgress, Baking, Succeeded, Failed, Stopped, Ready116- **Compute platforms**: Server (EC2/On-prem), Lambda, ECS -- each has different deployment group config117- **Deployment configs**: CodeDeployDefault.OneAtATime, HalfAtATime, AllAtOnce, and custom configs118- **Rollback config**: Check `autoRollbackConfiguration` -- can trigger on DEPLOYMENT_FAILURE or DEPLOYMENT_STOP_ON_ALARM119- **Blue/Green vs In-Place**: Check `deploymentStyle` -- Blue/Green requires load balancer config120- **Target revision**: Verify `targetRevision` in deployment group points to correct S3/GitHub location121- **Instance health**: For EC2, check `instanceSummary` with deployment ID for per-instance status