The codebuild project environment definition in Cloudformation supports a custom certificate. There doesn't appear to be a first class way to add a certificate path.

Use Case

It is sometimes necessary for projects running in a VPC connected to on-prem DNS to use their own certificate for SSL.

Proposed Solution

As a workaround I can add it to the Project node during synthesis but it should have better support.

Allow users to set the Certificate as an [Arn]https://docs.aws.amazon.com/cdk/api/latest/docs/@aws-cdk_core.Arn.html). The certificate value is an S3 arn which can be constructed from the Arn. Another option is to use the ISource implementation of S3Source. Arn seems simpler.

This is a 🚀 Feature Request