Accessing private Git repositories from Amazon EKS capability for Argo CD

This article explains how to securely connect Amazon EKS Argo CD capability to private Git repositories using AWS CodeConnections with IAM authentication.

• Create an AWS CodeConnections host in a VPC with connectivity to private Git servers (GitHub Enterprise or GitLab)
• Establish a connection that Argo CD uses with IAM-based authentication instead of long-term credentials
• Deploy applications from private repositories using CodeConnections Git HTTP proxy format in Argo CD manifests
• CodeConnections creates cross-account ENIs in subnets and installs connector apps for secure interactions
• Control access by allowlisting VPC CIDR blocks without managing repository-level permissions

This approach enables GitOps workflows on EKS with private Git repositories while maintaining enhanced security and avoiding credential management overhead.