A threat actor was able to exploit an inappropriately scoped GitHub token in the managed AWS CodeBuild development tool, and with that, commit malicious code into the extension's open source code ...

You can use AWS CodeBuild to run builds and unit tests. And for deployment, you can use AWS CodeDeploy, Amazon Elastic Container Service, AWS Fargate, or AWS Elastic Beanstalk.