AWS CodePipeline integration

[rmc3]

It should be possible to configure this tool with a configuration repository that, on updates, will trigger CodePipeline runs that will execute a dry run as its build step and produce the dry run reports as build artifacts, with an acceptance step involving review of the build artifacts, and the subsequent ability to "deploy" by converging changes to the AWS organization.