> Your custom code is hosted on AWS in sandboxed environments that are only visible your team.
As an infrastructural developer who has an ear to the ground with regards to security concerns, I immediately don't trust unsubstantiated descriptions of "sandboxed environments", especially not ones with regard to tools that may become core to my business practices. Can you fully describe how you are isolating these systems?
It's AWS Lambda in the background with proper IAM permissions set up so that powers you add to your team are only accessible from within your team. Happy to answer more questions or please email me at arun@asknestor.me