Blog

Notes from the control plane

• Oct 18, 2026

  How this site is built (and why a resume needs a threat model)

  A static site on a private S3 bucket behind CloudFront, a strict CSP, a serverless contact form, and GitHub Actions deploying with OIDC and no access keys.

  awscloudfrontterraformgithub-actions

Published elsewhere

• Public Cloud Account Metadata · AWS Architecture Blog
• S3 Malware Scanning · AWS Architecture Blog
• VPC Endpoint Policy Orchestration · re:Inforce 2023 talk (AWS TV)