A team's CodeBuild project builds a Docker image on every commit. Each build takes 12 minutes, most of which is spent re-downloading base image layers and re-installing OS packages that rarely change. The buildspec uses a standard managed image with privileged mode enabled. The team wants to reduce build times without adding external infrastructure or changing the base image, and they accept that the first build after cache invalidation will be slower. Which approach best meets these requirements?