AWS CodePipeline

AWS CodePipeline status in your Mac menu bar

ShipBoard shows every stage of your CodePipeline pipelines in the macOS menu bar — across AWS profiles and regions — and sends a native notification the moment a run fails. It reads your existing ~/.aws profiles, read-only, so there’s no console tab to keep open.

Download ShipBoard — Free macOS 14+ · Apple Silicon & Intel · v1.1.1

What you see for each pipeline

Set it up

  1. Make sure the profile works in your terminal: aws sso login --profile work for IAM Identity Center (SSO), or aws configure --profile personal for an access key.
  2. In ShipBoard, click + and choose AWS.
  3. Pick the profile and region, then tick the pipelines you want on the board.
  4. When an SSO session expires, the group shows Log in to AWS, which runs aws sso login for that profile.

What access ShipBoard needs

CredentialA named profile from ~/.aws/config and ~/.aws/credentials — SSO or access keys. ShipBoard never copies it anywhere.
IAM actionscodepipeline:ListPipelines, codepipeline:GetPipeline, codepipeline:GetPipelineState
Managed policyAWS’s AWSCodePipelineReadOnlyAccess covers all three.

ShipBoard only reads. It can’t start, stop, retry or approve anything. If you’d rather not attach a managed policy, this is the whole policy it needs:

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Action": [
      "codepipeline:ListPipelines",
      "codepipeline:GetPipeline",
      "codepipeline:GetPipelineState"
    ],
    "Resource": "*"
  }]
}

Good to know

AWS CodePipeline FAQ

Does ShipBoard need my AWS secret keys?

No. It resolves your named profile the same way the AWS CLI does. Access keys stay in your credentials file and SSO tokens stay in the CLI’s cache; nothing is copied, and nothing is sent anywhere except to AWS.

Can I watch pipelines in several accounts and regions?

Yes. Each profile and region pair is its own group on the board, and you can add as many as you like.

What happens when my SSO session expires?

That group shows an error with a Log in to AWS button, which runs aws sso login for the profile. The pipelines refresh once you’re signed in.

Will it tell me when a pipeline fails?

Yes. macOS shows a native notification when a pipeline goes from running to failed, and optionally when it succeeds. You can turn each one off in Settings.

Can ShipBoard change or re-run my pipelines?

No. It only calls three read-only APIs, so even a profile with broader permissions is only ever used to read status.