chore: Add validation to test release codebuild spec

Now the test release validation does the same checks as the prod release
(running the sample application against the new version). To support this
I've also refactored out the validation steps into a dedicated spec so both
the prod and test specs can depend on it.

Author: farleyb-amazon

codebuild/release/prod-release.yml

@@ -9,21 +9,33 @@ env:
 
 phases:
   install:
+    commands:
+      - pip install tox
+      - pip install --upgrade pip
     runtime-versions:
       python: latest
-  build:
+  pre_build:
     commands:
-      - pip install tox
       - git checkout $BRANCH
+      - CURRENT_COMMIT=$(git rev-parse --short HEAD)
+      - |
+        if expr "${CURRENT_COMMIT}" != ${COMMIT_ID}; then
+          echo "HEAD of repository commit (${CURRENT_COMMIT}) did not match expected commit (${COMMIT_ID}), stopping"
+          exit 1;
+        fi
+  build:
+    commands:
       - tox -e park
       - tox -e release
-      - git clone https://github.com/aws-samples/busy-engineers-document-bucket.git
-      - cd busy-engineers-document-bucket/exercises/python/encryption-context-complete
-      - sed -i "s/aws_encryption_sdk/aws_encryption_sdk==$VERSION/" requirements-dev.txt
-      - tox -e test
-
 
 batch:
-  fast-fail: false
-  build-list:
+  fast-fail: true 
+  build-graph:
     - identifier: prod_release
+    - identifier: validate_release
+      depend-on:
+        - prod_release
+      buildspec: codebuild/release/validate.yml
+      env:
+        variables:
+          PIP_INDEX_URL: https://pypi.python.org/simple/

codebuild/release/test-release.yml

@@ -9,17 +9,35 @@ env:
 
 phases:
   install:
+    commands:
+      - pip install tox
+      - pip install --upgrade pip
     runtime-versions:
       python: latest
-  build:
+  pre_build:
     commands:
-      - pip install tox
       - git checkout $BRANCH
+      - CURRENT_COMMIT=$(git rev-parse --short HEAD)
+      - |
+        if expr "${CURRENT_COMMIT}" != ${COMMIT_ID}; then
+          echo "HEAD of repository commit (${CURRENT_COMMIT}) did not match expected commit (${COMMIT_ID}), stopping"
+          exit 1;
+        fi
+  build:
+    commands:
       - tox -e park
       - tox -e test-release
 
 
 batch:
-  fast-fail: false
-  build-list:
+  fast-fail: true
+  build-graph:
     - identifier: test_release
+    - identifier: validate_test_release
+      depend-on:
+        - test_release
+      buildspec: codebuild/release/validate.yml
+      env:
+        variables:
+          PIP_INDEX_URL: https://test.pypi.org/simple/
+          PIP_EXTRA_INDEX_URL: https://pypi.python.org/simple/

codebuild/release/validate.yml

@@ -0,0 +1,16 @@
+version: 0.2
+
+phases:
+  install:
+    commands:
+      - pip install tox
+    runtime-versions:
+      python: latest
+  pre_build:
+    commands:
+      - git clone https://github.com/aws-samples/busy-engineers-document-bucket.git
+      - cd busy-engineers-document-bucket/exercises/python/encryption-context-complete
+      - sed -i "s/aws_encryption_sdk/aws_encryption_sdk==$VERSION/" requirements-dev.txt
+  build:
+    commands:
+      - tox -e test