8posts ·all writing
· via Spacelift
Agents are a new class of platform user. Give each one an identity, an owner, spend caps and audit logs, then widen its autonomy in stages as it earns trust.
#ai-agents #platform-engineering #security
· via Spacelift
Five layers of guardrails for AI-written infrastructure code: before generation, at review, at apply, after apply, and the policy that ties them together.
#ai-agents #iac #security #platform-engineering
· via Spacelift
Security for cloud migrations phase by phase: shared responsibility, the risks that appear mid-move, and a checklist covering before and after.
#aws #devops-tooling #security
· via Spacelift
Security across more than one cloud: why it gets harder, the aspects that differ per provider, and practices that hold the whole thing together.
#security #devops-tooling
· via AWS
Security posture as an IaC problem: Control Tower controls, baseline account vending, centralized monitoring, audit trails and drift prevention.
#aws #iac #security
· via StackGuardian
Cloud security practices made enforceable: the implementation challenges, the practices worth codifying and turning both into automated guardrails.
#iac #devops-tooling #security
· via Spacelift
Ansible Vault end to end: encrypting files and strings, password management options, using encrypted content in playbooks and rotation habits.
#ansible #security #devops-tooling
· via Spacelift
IAM policies from the ground up: policy types, document structure, creating and validating policies, versioning and the practices that avoid pain.
#aws #security