I am running an AWS CodeBuild project to build, test and publish a .NET 8 application. The CodeBuild project is running/deployed in my account’s VPC which, includes a NAT Gateway for outbound internet traffic because it also requires access to some private VPC resources.
The Security Group on my CodeBuild project allows outbound HTTPS/443 to the public internet (0.0.0.0/0) and the build process is currently hanging on dotnet publish
– which would include the step to pull the NuGet package dependencies for the build.
I see in my VPC Flow logs filtered to the ENI of the CodeBuild project, the REJECT events for traffic on Port 80. If I allow outbound HTTP/80 the dotnet publish
does not hang and is successful.
My question is, is it possible to configure the communication with NuGet to ONLY be over HTTPS/443?
3