Automation makes cloud operations faster, but it also lets a mistake repeat at machine speed. A deployment job with broad permissions can change far more than the application it was meant to release. A script using a long-lived access key can keep working long after its original purpose has ended.
Tag: AWS
AWS Cost Alerts Are Not a Kill Switch: Designing a Runaway-Workload Containment Loop
A cost alert can tell you that estimated AWS spend crossed a threshold. It may not tell you quickly enough to stop a workload that is creating billable usage right now.
Level-Up Your Landing Zone: Upgrading AWS Control Tower to v3.3 & Using the New Enabled Controls API for Continuous Gap Analysis
The AWS Control Tower team has been shipping features at a blistering pace this year. Two stand-outs landed in May 2025:
- Centralized “Enabled Controls” view in the console, a one-stop dashboard that lists every preventive, detective, and proactive control you’ve switched on across all OUs and accounts. Amazon Web Services, Inc.
- 233 new AWS Config-backed controls plus automatic baseline-drift reporting to surface deviations from best practice as they happen. docs.aws.amazon.com