Insights
Cloud foundations
AWS multi-account, platform engineering and cost.
Theme
Format
Subject
Showing 20 of 20 insights.
- Security & governance · Technical deep dive · 9 min read
SCP guardrails as code: policy layers, pipelines and tested rollout
Build AWS guardrails from reusable root and OU policies, configuration-driven deployment, protected exceptions and live validation before wider rollout.
Project work ·
- AI in practice · Business perspective · 6 min read
From AI Experiments to Working Outcomes: A Practical Approach to Enterprise Delivery
A practical route from delivery backlog to a bounded AI initiative, with evidence from software migration and technical knowledge development.
- AI in practice · Technical deep dive · 15 min read
From Static WordPress to Next.js and MDX: An AI-Assisted Migration with Claude, GPT and Superpowers
How we migrated this site with AI-assisted development, preserved its content, and applied lessons from the Otari technical resource.
- AI in practice · Business perspective · 5 min read
Modernising enterprise software with AI, security and control
How structured AI-assisted delivery can move an existing application forward, with explicit security controls and evidence for acceptance.
Project work ·
- Cloud foundations · Technical deep dive · 5 min read
From specification to AWS: inside an AI-assisted migration
A practical delivery workflow with AWS architecture, bounded agent tasks, permission checks and promotion of the tested artifact.
Project work ·
- Security & governance · Technical deep dive · 5 min read
Building a controlled AWS environment for enterprise experimentation
Define what an experiment may access, express the boundary in code and distinguish a working prototype from an accepted platform.
Project work ·
- Cloud foundations · Technical deep dive · 7 min read
Controlled third-party AWS connectivity: routes, ownership and drift
Treat partner connectivity as an owned policy: approve the inspection path, deploy explicit routes and observe specific configuration changes.
Project work ·
- Security & governance · Technical deep dive · 10 min read
A configuration-driven AWS WAF platform across account boundaries
How a small YAML file drives shared private ALBs, CloudFront and cross-account Route 53 through Azure DevOps, under a central WAF policy.
Project work ·
- Security & governance · Business perspective · 4 min read
Making credential lifecycle management an operating process
How AWS credential automation connects ownership, controlled changes and operating records so teams can manage long-term access as a repeatable process.
Project work ·
- Cloud foundations · Technical deep dive · 6 min read
Deleting unused access keys across AWS accounts with StackSets
How two StackSets deploy daily workers that delete keys unused for more than 180 days, with local IAM actions and central cross-account reporting.
Project work ·
- Cloud foundations · Guide · 9 min read
Moving specialist data onto AWS without breaking the workflow
How endpoint ownership, cross-account routing and controlled DataSync transfers can support specialist file workflows on FSx for NetApp ONTAP.
Project work ·
- Cloud foundations · Technical deep dive · 9 min read
AWS deployment access as code: federation, permissions and account baselines
Separate human access from pipeline federation, bind deployment roles to explicit claims, and roll out AWS account baselines with controlled exceptions.
Project work ·
- Cloud foundations · Technical deep dive · 9 min read
Mastering Multi-Account AWS Deployments: Using Managed StackSets to Deploy Unmanaged StackSets with SAM
As organizations scale their AWS presence, the single-account approach quickly becomes impractical and risky.
- Cloud foundations · Technical deep dive · 8 min read
Static WordPress with CloudFront: Creating a High-Performance Website Infrastructure
In the ever-evolving landscape of web development, there’s a growing trend toward static website hosting for improved performance, security, and cost-efficiency.
- Cloud foundations · Technical deep dive · 8 min read
EC2 power leasing across AWS accounts
A central lease service connects ServiceNow requests to EC2 automation across AWS accounts, with explicit scheduling rules and security boundaries.
Project work ·
- Cloud foundations · Business perspective · 2 min read
Don’t Let a Weak Cloud Foundation Slow You Down—Build for Long-Term Success
What does it mean to build a strong cloud foundation, and why do so many businesses get it wrong?
- Cloud foundations · Business perspective · 4 min read
Wasting Money on Cloud Services? Proven Strategies to Cut Costs Without Compromise
Gartner estimates that organizations waste up to 30% of their cloud budgets due to mismanagement, overprovisioning, and lack of cost optimization.
- Cloud foundations · Business perspective · 3 min read
Struggling with Deployment Delays? How Platform Engineering Accelerates Success
Many businesses face similar bottlenecks: delayed product releases, inconsistent environments, and inefficient DevOps workflows.
- Cloud foundations · Business perspective · 3 min read
Is Your Business Ready for the Future? How Application Transformation Fuels Growth
Many businesses hesitate to take the leap, clinging to legacy systems that slow them down. Is your company ready for the future?
- Security & governance · Business perspective · 3 min read
Your Data Is at Risk! How to Build an Unbreakable Cloud Security Strategy
In 2019, Capital One suffered a massive data breach, exposing the personal information of over 100 million customers. The cause? A misconfigured firewall.