Insights
Security & governance
Identity, governance, data protection and security controls across AI and AWS platforms.
Theme
Format
Subject
Showing 14 of 14 insights.
- Security & governance · Technical deep dive · 9 min read
SCP guardrails as code: policy layers, pipelines and tested rollout
Build AWS guardrails from reusable root and OU policies, configuration-driven deployment, protected exceptions and live validation before wider rollout.
Project work ·
- AI in practice · Technical deep dive · 15 min read
From Static WordPress to Next.js and MDX: An AI-Assisted Migration with Claude, GPT and Superpowers
How we migrated this site with AI-assisted development, preserved its content, and applied lessons from the Otari technical resource.
- AI in practice · Business perspective · 5 min read
Modernising enterprise software with AI, security and control
How structured AI-assisted delivery can move an existing application forward, with explicit security controls and evidence for acceptance.
Project work ·
- Cloud foundations · Technical deep dive · 5 min read
From specification to AWS: inside an AI-assisted migration
A practical delivery workflow with AWS architecture, bounded agent tasks, permission checks and promotion of the tested artifact.
Project work ·
- Security & governance · Technical deep dive · 5 min read
Building a controlled AWS environment for enterprise experimentation
Define what an experiment may access, express the boundary in code and distinguish a working prototype from an accepted platform.
Project work ·
- Cloud foundations · Technical deep dive · 7 min read
Controlled third-party AWS connectivity: routes, ownership and drift
Treat partner connectivity as an owned policy: approve the inspection path, deploy explicit routes and observe specific configuration changes.
Project work ·
- AI in practice · Guide · 5 min read
Giving AI agents bounded tasks—and results you can verify
Use structured briefs, measured inputs and checked outputs to make agent research useful, inspectable and safe to act on.
Project work ·
- Security & governance · Technical deep dive · 10 min read
A configuration-driven AWS WAF platform across account boundaries
How a small YAML file drives shared private ALBs, CloudFront and cross-account Route 53 through Azure DevOps, under a central WAF policy.
Project work ·
- Security & governance · Business perspective · 4 min read
Making credential lifecycle management an operating process
How AWS credential automation connects ownership, controlled changes and operating records so teams can manage long-term access as a repeatable process.
Project work ·
- Cloud foundations · Technical deep dive · 6 min read
Deleting unused access keys across AWS accounts with StackSets
How two StackSets deploy daily workers that delete keys unused for more than 180 days, with local IAM actions and central cross-account reporting.
Project work ·
- Cloud foundations · Technical deep dive · 9 min read
AWS deployment access as code: federation, permissions and account baselines
Separate human access from pipeline federation, bind deployment roles to explicit claims, and roll out AWS account baselines with controlled exceptions.
Project work ·
- Cloud foundations · Technical deep dive · 9 min read
Mastering Multi-Account AWS Deployments: Using Managed StackSets to Deploy Unmanaged StackSets with SAM
As organizations scale their AWS presence, the single-account approach quickly becomes impractical and risky.
- Cloud foundations · Technical deep dive · 8 min read
EC2 power leasing across AWS accounts
A central lease service connects ServiceNow requests to EC2 automation across AWS accounts, with explicit scheduling rules and security boundaries.
Project work ·
- Security & governance · Business perspective · 3 min read
Your Data Is at Risk! How to Build an Unbreakable Cloud Security Strategy
In 2019, Capital One suffered a massive data breach, exposing the personal information of over 100 million customers. The cause? A misconfigured firewall.