Ensure environment variables do not contain any credentials in AWS Codebuild Project

Using credentials in environment variables with commonly identifiable names may make the resource vulnerable to unauthorized access. It is recommended to use a secret manager or a key management service to store credentials instead of environment variables.

In AWS Console -

1. Sign in to AWS Console and open the CodeBuild console.
2. Select Build project and then select the build project that contains plaintext credentials.
3. Select Environment from edit and expand additional configuration.
4. Click on remove button next to the environment variables.
5. Select Update environment.

In Terraform -

1. Ensure "environment_variable" doesn't contain values like 'AWS_ACCESS_KEY_ID' / 'AWS_SECRET_ACCESS_KEY'.

For more information on configuring a field-level encryption profile, see the AWS documentation.
References:
https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-env-vars.html