CodeBuild Artifact Pipeline

In this lab you will stand up a complete AWS CodeBuild pipeline that compiles a small Node.js application, runs unit tests, caches dependencies, publishes JUnit test reports to a CodeBuild report group, and stores build artifacts in an S3 bucket encrypted with a customer-managed KMS key.

You will:

• Create a KMS customer-managed key and a tagged S3 artifact bucket
• Create a CodeBuild service role scoped to S3, KMS, Logs, and CodeBuild Reports
• Author a `buildspec.yml` with install, build, test, and reports phases plus an S3 dependency cache
• Upload source to S3 and create the CodeBuild project pointing at it
• Trigger a build, watch logs, and inspect the report group and artifact outputs
• Introduce a failing unit test, observe the failure surface in the report group, then fix it and re-run

Region: `us-east-1`. Instance type: `t3.small` workstation. All resources are tagged `lab=true,Course=dop-c02` so the cleanup script can sweep them on lab stop.