diff --git a/decrypt_oracle/.chalice/buildspec.yaml b/decrypt_oracle/.chalice/buildspec.yaml
index 657c5a4be..d7c256698 100644
--- a/decrypt_oracle/.chalice/buildspec.yaml
+++ b/decrypt_oracle/.chalice/buildspec.yaml
@@ -2,7 +2,7 @@ version: 0.2
 phases:
   install:
     commands:
-      - pip install tox
+      - pip install "tox < 4.0"
   build:
     commands:
       - cd decrypt_oracle
diff --git a/decrypt_oracle/.chalice/pipeline.py b/decrypt_oracle/.chalice/pipeline.py
index 45e050a2d..39eb7865c 100644
--- a/decrypt_oracle/.chalice/pipeline.py
+++ b/decrypt_oracle/.chalice/pipeline.py
@@ -23,7 +23,7 @@
 
 APPLICATION_NAME = "AwsEncryptionSdkDecryptOraclePython"
 PIPELINE_STACK_NAME = "{}DeployPipeline".format(APPLICATION_NAME)
-CODEBUILD_IMAGE = "aws/codebuild/python:3.6.5"
+CODEBUILD_IMAGE = "aws/codebuild/standard:5.0"
 BUILDSPEC = "decrypt_oracle/.chalice/buildspec.yaml"
 GITHUB_REPO = "aws-encryption-sdk-python"
 WAITER_CONFIG = dict(Delay=10)