AI-powered AWS Security & Cloud Operations

AWS Security, built for APRA-regulated Australia

CPS 234, CPS 230, the Cyber Security Act’s ransomware reporting, and FAR’s personal accountability mean your board now needs demonstrable, current evidence on AWS — and the existing tooling is either four years stale or thousands a month.

Big Data engineer? The free tools are still here →

15+ years platform engineering · enterprise data security at MNC scale · AWS Solutions Architect & AWS Security Specialty certified

AWS Certified Security – Specialty AWS Certified Solutions Architect – Associate

Stay current

CPS 230 came into force in 2025, the Cyber Security Act added ransomware reporting, and FAR put accountability on named executives. Most AWS setups haven’t caught up.

Map controls to real AWS services

Not abstract regulatory paragraphs — actual AWS Config rules, IAM policies, GuardDuty, and Security Hub findings that satisfy each obligation.

Board-ready evidence

Turn technical findings into language a compliance officer can hand to APRA — demonstrable, current, and traceable to the standard.

Featured writing

All posts →

CDP

Why Your YARN Containers Keep Getting OOM-Killed

The virtual memory check is unstable and platform-dependent. Here's exactly when to disable it and what to set instead.

Kafka

Kafka ACL Patterns That Actually Work in Production

Forget the textbook examples. Here are the ACL matrices we use at scale across multiple environments.

Building in the open

cps234-aws-config-pack

Updated CPS 234 / CPS 230 conformance pack for AWS Config

aiopsone-au-landing-zone

Terraform for a CPS 234-aligned landing zone + Essential Eight ML3

steampipe-mod-aws-compliance-apra

A Steampipe/Powerpipe APRA compliance mod

apra-compliance-narrator

AI tool: AWS findings → APRA-paragraph narrative reports

Before AWS Security, I spent years running Kafka, Hadoop and CDP at scale. Those free tools — the YARN calculator, HDFS planner, Spark sizer and queue designer — are still live and still free. Use the Big Data tools →

Get the CPS 234 → AWS Controls cheatsheet

A practitioner mapping of every APRA CPS 234 control to the real AWS services that satisfy it. Free — straight to your inbox.

No spam. Unsubscribe anytime. See our privacy policy.