AWS Deploy (CI/CD) Works best with the AWS MCP server for running CLI commands and validating configurations directly. All guidance also works with standard AWS CLI. Critical Warnings CodeConnections PENDING trap : Connections created via CLI/CloudFormation remain indefinitely — MUST complete OAuth in the AWS Console. No API-only path exists. Cross-account triple requirement : Cross-account deploys need ALL THREE: (1) KMS key policy granting target account (use key ID, not alias), (2) S3 bucket policy for target account, (3) cross-account IAM role with trust policy. Missing any one = cryptic…