GP is saying that GHA would need zero information about AWS if CodeBuild used a Github token and listened for GHA runs.
That may be true, but it's not what the link describes.
alt Hacker News
That may be true, but it's not what the link describes.