All Posts

Fifty-nine percent of your employees are sourcing their own AI agents. You just don’t know which ones, what they’re connected to, or what decisions they’re making on your organisation’s behalf. Section 1 — The Shadow Agent Problem The Shadow Agent Problem A decade ago, shadow IT meant employees using Dropbox instead of the corporate file server. The risk was manageable — data stored in the wrong place, some compliance exposure, but limited blast radius. Shadow agents are fu

When a GenAI assistant gives a wrong answer, the first thing people blame is the model. Sometimes that's fair. More often, in my experience, the model did exactly what it was told. It read what we gave it and repeated it faithfully. The problem was what we gave it. An internal policy assistant told a staff member they could carry over ten days of annual leave. That had been true until March. The policy was updated, the new PDF went into the S3 bucket, and nobody re-synced the

I've sat in a lot of data platform steering meetings. The good ones argue about ownership. The bad ones argue about file formats. A few months after one platform went live, an analyst asked a simple question in the steering meeting: could her team use the customer table to train a new model? Three teams said they maintained that table. None of them would approve the request. The meeting closed with an action to "confirm data ownership", and two quarters later that action was

Eighty percent of organisations have already encountered risky behaviour from their AI agents. Here are the five governance gaps that made it possible — and how to close them before they become compliance failures. Section 1 — The Hidden Risk The Hidden Risk Let's start with three statistics that should concern every risk professional in Australia and New Zealand: “50% of AI use across ANZ organisations is unapproved or ungoverned. Half of all AI activity in your organisation

Your governance framework was built for AI that recommends. But 69% of Australian organisations now run AI that acts. The rules have changed. Section 1 — The Shift from Recommendation AI to Action AI For the past decade, AI governance has focused on a relatively straightforward premise: an AI system analyses data, generates a recommendation, and a human makes the final decision. Your governance frameworks — the policies, review boards, and compliance checklists — were desig

🔗 Part 2 of a series — AI in SecurityPart 1: AI Forensic Investigator — the ambulance. AI that reconstructs a breach after it happens. This is Part 2: AWS Continuum — what you build before you need the ambulance. A few weeks ago I spent a weekend building an AI forensic investigator — Protocol SIFT — on top of the SANS SIFT Workstation. It reasons over process trees, memory dumps, and login histories simultaneously to reconstruct a breach that already happened. I called it t

From Discovery Tool to Production Platform In Part 1 we set up Kiro in an enterprise AWS tenancy. In Part 2 we connected MCP servers and used Kiro as a discovery and documentation tool for Data Architects and Cloud Architects — querying live AWS accounts and databases through natural language. This post moves up a layer. Kiro is excellent for augmenting a human who's still driving. The next step — building an AI system that takes actions on its own, within defined boundaries

Picking Up Where Part 1 Left Off In Part 1, we covered the enterprise account architecture for Kiro — why the Kiro profile belongs in a Shared Services account rather than the management account, how it connects cross-account to your IAM Identity Center Organisation instance, and how developers install the IDE and sign in via SSO. With Kiro installed and your team signed in, the next question is: how does Kiro actually become useful for the work your team does every day? The

Introduction If you've been following the rapid evolution of AI-powered development tools, you've likely heard about Kiro — AWS's new agentic IDE that takes a fundamentally different approach to AI-assisted development. Unlike tools like Cursor or GitHub Copilot that focus on chat-to-code workflows, Kiro introduces Spec-Driven Development: a structured approach where requirements, architecture design, and implementation tasks are first-class artefacts that live alongside your

I Spent a Weekend Building an AI Forensic Investigator. Here's Exactly How I Did It. I do a lot of work in cloud security. But this past weekend I went deeper into the stack than usual — into digital forensics — and built something that genuinely changed how I think about AI in security work. This is the full story of what I built, how it works, and what surprised me along the way. First — what problem was I trying to solve? When a company gets hacked, someone has to reconstr

A hands-on deep dive into AWS's new S3 Files feature — bridging the gap between object storage and POSIX-style file access for enterprise workloads. 📋 Table of Contents What is Amazon S3 Files? Why This Matters for Enterprise Architects S3 Files vs EFS vs FSx — When to Use What Step-by-Step: Creating Your First S3 File System Mounting to Compute Resources Security Architecture & IAM Design Enterprise Use Cases Infrastructure as Code (Terraform) Key Takeaways 🗂️What is Amazo

In late 2025, the AWS Migration Hub has evolved into AWS Transform , an agentic AI service designed to eliminate "Migration Stall." This technical reference outlines how to build an AI-ready Landing Zone that supports full-stack modernization—from legacy Windows to high-performance Linux and AI workloads. I. Beyond Windows: The Full-Stack Power of AWS Transform While AWS Transform gained fame for its .NET to Linux refactoring, its capabilities cover the entire enterprise lan

# AI Agent Development Using Antigravity: Building SecureRisk from Concept to Production *How I leveraged multi-agent AI development to build a complete security and compliance platform in 6 hours* --- ## If You're Into AI Agent Development... If you're into AI Agent development, **Google's new IDE Antigravity is worth a look**. It's currently in preview, so it's **free** 🎉 I recently built **SecureRisk** - a comprehensive security risk management and compliance platfor

Just wrapped up a deployment where Terraform Cloud , Ansible , and GitHub come together to automate AWS infrastructure and configuration...

AI models are incredible at generating text, images, or even code. But what if we want them to do things in the real world? Like...

Building AI agents on AWS has been a continuous learning adventure. Here are some key takeaways I've gathered along the way: 1....

🔥 Why Agentic Workflows Matter The rise of AI-driven applications has transformed how we build intelligent, autonomous systems. But with...

🚀 Deploying Your First AWS ROSA Cluster: Part 2 Introduction 🌟 Welcome back! In our first blog , we covered all the necessary...

Introduction 🌟 Are you ready to simplify your Kubernetes experience while leveraging the power of AWS? Look no further than AWS ROSA...

Hey there, cloud warriors! Ready to take your AWS security skills to the next level? Buckle up, because we’re diving into the AWS...