Oleksandr Kuzminskyi shows how to embed ISO 27001 into AWS architecture from day one with Terraform, covering multi-account isolation, OIDC-based CI/CD, encryption, and a full vulnerability pipeline. The audit evidence writes itself from Git history, and security posture is measured as a live CIS Benchmark score rather than an incident count.

Paul SANTUS makes the case that AWS S3 Files turns a DIY SFTP server on ECS Fargate into a serious alternative to Transfer Family, cutting the monthly base cost by 8x. Files land natively in S3, so event notifications, lifecycle rules, and cross-region replication all work without any extra plumbing.

Ashish Kasaudhan shows how Claude Code acts as a live compliance layer for AWS, using MCP and skills to detect IAM drift, stale secrets, and policy gaps before they reach production. Agent Teams audit multiple environments in parallel and surface all findings as a GitHub Issue every morning.

Yousif Akbar announces Terragrunt 1.0, locking in backward compatibility across CLI flags and HCL configs after nearly a decade of development. The release bundles Stacks for large infrastructure estates, a redesigned CLI, and a free Terragrunt Scale tier for GitHub and AWS users.

Awesome Terraform Compliance - tools, frameworks, and resources for implementing compliance, security, and governance controls in Terraform and OpenTofu infrastructure.