https://ones.com/blog/build-robust-ci-cd-pipeline-aws/