Use a cloud user with only CodeDeploy rights.