Solid Cloud Foundations
Lay the groundwork for success. We create cloud foundations tailored to your needs, so you can build with confidence and achieve your goals without delays.
Assess the foundation behind one workload
Before you migrate, scale or remediate a workload, establish which architecture and operating controls it actually needs. Our AWS Workload Foundations Assessment reviews one workload and gives you prioritised findings, a target pattern and a practical delivery decision. The scope and fixed fee are agreed after a qualification call.
Related work
AWS platform engineering and security governance
AWS security guardrails that keep delivery moving
An oil and gas company turned AWS security policy into a reusable delivery platform, with workload-specific controls and a tested path to tighter boundaries.
Project work ·
Outcome
A repeatable policy delivery platform, extended with an internet-exposure pilot validated against 90 days of activity across 62 sampled accounts.
AWS security architecture and platform delivery
Retiring a US$43,000 WAF contract with a shared AWS platform
Replacing Imperva with a shared AWS security platform removed an annual renewal and made application onboarding a reviewed configuration change.
Project work ·
Outcome
Retired a US$43,266 annual Imperva contract; 21 application distributions use four shared ALBs with configuration-driven onboarding.
AWS platform engineering and service automation
EC2 power leasing across 13 AWS accounts
Growing account footprint; about US$699,000 in cumulative on-demand-equivalent compute value.
Project work ·
Outcome
Cumulative on-demand-equivalent compute value: approximately US$699,000 · Savings period: 1 March 2025–30 September 2026 (19 months) · Annual estimate: approximately US$360,000.
AWS architecture, security and AI-assisted delivery
Beyond shared networking: an AWS sandbox for engineering
A sandbox-owned network and local Transit Gateway gave an oil and gas company a foundation for AI-assisted engineering and a path to Amazon WorkSpaces.
Project work ·
Outcome
An EC2 sandbox prototype with its own network and Transit Gateway, plus groundwork for a future Amazon WorkSpaces platform.
AI-assisted software delivery
From WordPress export to an AI-editable website
We rebuilt our live marketing site around structured source, using AI-assisted delivery and explicit checks to carry its content and established links forward.
Outcome
A live site maintained directly in source, with tested publishing and legacy URL coverage.
Related insights
- Cloud foundations · Technical deep dive · 7 min read
Controlled third-party AWS connectivity: routes, ownership and drift
Treat partner connectivity as an owned policy: approve the inspection path, deploy explicit routes and observe specific configuration changes.
Project work ·
- Cloud foundations · Technical deep dive · 9 min read
AWS deployment access as code: federation, permissions and account baselines
Separate human access from pipeline federation, bind deployment roles to explicit claims, and roll out AWS account baselines with controlled exceptions.
Project work ·
- Cloud foundations · Guide · 9 min read
Moving specialist data onto AWS without breaking the workflow
How endpoint ownership, cross-account routing and controlled DataSync transfers can support specialist file workflows on FSx for NetApp ONTAP.
Project work ·
- Security & governance · Technical deep dive · 10 min read
A configuration-driven AWS WAF platform across account boundaries
How a small YAML file drives shared private ALBs, CloudFront and cross-account Route 53 through Azure DevOps, under a central WAF policy.
Project work ·
- Security & governance · Technical deep dive · 9 min read
SCP guardrails as code: policy layers, pipelines and tested rollout
Build AWS guardrails from reusable root and OU policies, configuration-driven deployment, protected exceptions and live validation before wider rollout.
Project work ·
- Security & governance · Business perspective · 4 min read
Making credential lifecycle management an operating process
How AWS credential automation connects ownership, controlled changes and operating records so teams can manage long-term access as a repeatable process.
Project work ·
- Cloud foundations · Technical deep dive · 6 min read
Deleting unused access keys across AWS accounts with StackSets
How two StackSets deploy daily workers that delete keys unused for more than 180 days, with local IAM actions and central cross-account reporting.
Project work ·
- Cloud foundations · Technical deep dive · 8 min read
EC2 power leasing across AWS accounts
A central lease service connects ServiceNow requests to EC2 automation across AWS accounts, with explicit scheduling rules and security boundaries.
Project work ·
- AI in practice · Business perspective · 5 min read
Modernising enterprise software with AI, security and control
How structured AI-assisted delivery can move an existing application forward, with explicit security controls and evidence for acceptance.
Project work ·
- Cloud foundations · Technical deep dive · 5 min read
From specification to AWS: inside an AI-assisted migration
A practical delivery workflow with AWS architecture, bounded agent tasks, permission checks and promotion of the tested artifact.
Project work ·
- AI in practice · Guide · 5 min read
Giving AI agents bounded tasks—and results you can verify
Use structured briefs, measured inputs and checked outputs to make agent research useful, inspectable and safe to act on.
Project work ·
- Security & governance · Technical deep dive · 5 min read
Building a controlled AWS environment for enterprise experimentation
Define what an experiment may access, express the boundary in code and distinguish a working prototype from an accepted platform.
Project work ·
- AI in practice · Business perspective · 6 min read
From AI Experiments to Working Outcomes: A Practical Approach to Enterprise Delivery
A practical route from delivery backlog to a bounded AI initiative, with evidence from software migration and technical knowledge development.
- AI in practice · Technical deep dive · 15 min read
From Static WordPress to Next.js and MDX: An AI-Assisted Migration with Claude, GPT and Superpowers
How we migrated this site with AI-assisted development, preserved its content, and applied lessons from the Otari technical resource.
- Cloud foundations · Technical deep dive · 9 min read
Mastering Multi-Account AWS Deployments: Using Managed StackSets to Deploy Unmanaged StackSets with SAM
As organizations scale their AWS presence, the single-account approach quickly becomes impractical and risky.
- Cloud foundations · Technical deep dive · 8 min read
Static WordPress with CloudFront: Creating a High-Performance Website Infrastructure
In the ever-evolving landscape of web development, there’s a growing trend toward static website hosting for improved performance, security, and cost-efficiency.
- Cloud foundations · Business perspective · 2 min read
Don’t Let a Weak Cloud Foundation Slow You Down—Build for Long-Term Success
What does it mean to build a strong cloud foundation, and why do so many businesses get it wrong?
Let’s Build Something Together
Whether it’s optimizing costs, strengthening security, or building a seamless cloud foundation, now is the time to act.
Book a conversation