AWS CI/CD Pipeline

I need a production-ready CI/CD workflow in AWS that starts with CodeCommit and flows through CodePipeline, CodeBuild, and CodeDeploy, automatically releasing every merge to a separate staging stack and then to the live environment once approved.

Key points I want covered
• Repository lives in AWS CodeCommit; all actions must trigger from commits or pull-request merges.
• Two parallel environments—staging and production—provisioned through the pipeline, with clear approval gates and automated rollback on failed health checks.
• Blue/Green or in-place deployment strategy configured in CodeDeploy (whichever suits the application architecture best).
•
• IAM roles, encryption, logging, and parameter storage set up according to AWS security best practices to keep the pipeline and artifacts locked down yet auditable.
• Documentation at the end that walks me through promoting a build, rotating certificates, and extending the pipeline for additional environments.

Deliverables
1. CloudFormation/CDK templates (or Terraform if you strongly prefer) for the full pipeline and supporting infrastructure.
2. Verified SSL certificate attached and tested on the load balancer / CloudFront distribution.
3. README or short Loom/video walkthrough showing the commit-to-deploy flow and rollback test.

I expect the entire solution to be clean, modular, and easy to maintain, with scalability in mind from the start. If something is unclear about my current AWS setup, let’s discuss it early so we don’t lose time later.