Loops, not scripts.
Production-grade automations for cloud & platform work. Each one is a designed loop — trigger, reasoning, verification gate, action, paper trail. Open one for full docs and config.
IAM Drift Sentinel
Watches CloudTrail for over-permissive policy writes, reasons against 90 days of real access, and opens a scoped Terraform PR — verified in the IAM simulator first.
Cost Anomaly Digest
Separates real cost anomalies from weekday noise and new workloads, then writes the digest a human actually reads: top 3 movers, why, one-line fix.
Postmortem Drafter
On incident resolution, pulls the Slack war-room and PagerDuty timeline, drafts a blameless postmortem with open questions flagged — never publishes on its own.
K8s Deprecation Radar
When a new EKS/GKE minor goes GA, scans every cluster for deprecated API usage and files one migration issue per team with the exact manifest fixes.
TF Plan Explainer
Turns a 400-line plan into six lines of plain English: what's destroyed, what's risky, what's cosmetic — so reviewers read the diff that matters.
Expiry Sweep
Weekly sweep of ACM certs, KMS keys, and service-account tokens nearing expiry. Opens the rotation PR itself and pings the owner — before the pager does.