05Cloud security

Secure by default, not by exception.

Member of the AWS Security Technical Field Community. I review, automate and harden cloud workloads, from identity and network boundaries to the guardrails around AI agents.

Defense in depth

Six layers around every workload.

Layer 01 of 06

Identity and authorization

IAM and least privilege, MFA, authorization boundaries, runtime identity for agents and controlled tool permissions.

IAM
MFA
Cognito
AgentCore Identity

Method

How a security review runs.

01
Map trust boundaries
Who and what can reach each component, and why.
02
Find the risks
Failure modes, exposure and the hardening priorities that matter most.
03
Shape the controls
Least privilege, segmentation, logging and secure defaults in code.
04
Hand over ownership
Documented responsibilities and controls the team can operate.

Security credentials