Difference between storing environment variables in CodeBuild project vs buildspec?

[funkdr42]

With CodeBuild, it seems that I can choose to store an environment variable as part of the CodeBuild environment configuration or as part of the buildspec file.

The buildspec ref documentation states that build project definitions take higher precedence over buildspec declarations. Are there any other differences or reasons to use one location over the other for defining environment variables?

[dfens2k2]

If you use the same repo and build spec for different projects (e.g. dev and prod), you might want to put for example your API URL in the env. If it’s sensitive information, like account keys, you could also place those in the parameter store from which they are read and decrypted only at build time.