This ticket https://github.com/shinesolutions/shine-works-aws-resources/issues/1 will create a Role for CodeBuild/CodePipeline. There should be an assume role mechanism that will assume this role.