LLMs score 85%+ on public SQL benchmarks but collapse to 39–61% on real enterprise schemas. I built a multi-stage data agent for a life insurance data warehouse to close that gap — here’s what 18 months of iteration taught me about why the approach matters more than the model.

CodeBuild-hosted GitHub Actions runners in private subnets give you controlled, static egress through a NAT Gateway — meeting enterprise allowlisting requirements. This post covers two authentication paths: CodeConnections for github.com repos, and a PAT-based workaround for GitHub Enterprise Cloud with data residency (.ghe.com) where CodeConnections isn’t supported.