How AWS CodePipeline and CodeBuild Work Behind the Scenes

When I first started learning AWS CI/CD, I was confused about what actually happens after a GitHub push. Does CodePipeline build the code? Where does the build run? How does CodeBuild get permission t