Security September: Escaping CodeBuild - The compromise that wasn’t was a guest post on Ian McKay’s blog.