CodeBuild project should not run builds in privileged mode

What it checks

CodeBuild project should not run builds in privileged mode

Where it applies

Terraform: aws_codebuild_project

CloudFormation: AWS::CodeBuild::Project

How to fix it

1. Set privileged_mode = false. If Docker image builds are required, migrate to CodeBuild with Kaniko or BuildKit (no privileged mode needed).

Frameworks

• AWS FSBP CodeBuild.5
• SOC 2 CC6.1
• NIST 800-53 rev5 AC-3

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules