Writing

Lab walkthroughs, framework deep-dives, and notes from the GRC engineering bench — tied to NIST 800-53 Rev 5, FedRAMP High, and CJIS v6.0 where it matters.

IAM Hardening on a Brownfield AWS Account: Assess, Remediate, Prove
June 14, 2026

I treated a cluttered study account like an audit engagement. A credential report surfaced a 203-day access key, no password-reuse prevention, and no cost guardrail — here's the assess → remediate → prove loop that turned it into a compliant IAM baseline, mapped to NIST 800-53 Rev 5, FedRAMP High, and CJIS v6.0.

aws-lab iam identity-governance nist-800-53 cjis-v6.0