Personal engineering work · public repository
A multi-account AWS organisation, built security-first
Hierarchical OUs, a centralised security account, production-grade SCPs with root-account protection, and Security Lake telemetry in OCSF — provisioned end to end in Terraform.
- Cross-account least-privilege IAM with S3 + DynamoDB + KMS remote state