CodeBuild-Hosted GitHub Actions Runners: From Static Egress to GHE Data Residency
CodeBuild-hosted GitHub Actions runners in private subnets give you controlled, static egress through a NAT Gateway — meeting enterprise allowlisting requirements. This post covers two authentication paths: CodeConnections for github.com repos, and a PAT-based workaround for GitHub Enterprise Cloud with data residency (.ghe.com) where CodeConnections isn’t supported.