From Analysis to Remediation in Minutes: Using AWS Transform and Kiro to Tackle IaC Technical Debt

Infrastructure-as-Code repositories have a habit of quietly accumulating technical debt. A Lambda runtime drifts toward end-of-life, a copy-pasted resource block introduces a subtle bug, IAM policies stay broader than they need to be. These issues rarely surface until something breaks in production — or until an auditor asks uncomfortable questions.

In this post, I walk through how I used AWS Transform (ATX) inside Kiro to perform a comprehensive analysis of a real CloudFormation project, surface seven technical debt findings, and remediate six of them — all without leaving the IDE.

AWS European Sovereign Cloud: A Strategic Bet on Regulatory Compliance Over Innovation Velocity

The Promise: Digital Sovereignty Meets Hyperscale Cloud

AWS’s European Sovereign Cloud represents a significant strategic pivot—one that acknowledges a fundamental tension in modern cloud computing. European organisations, particularly those in regulated industries and public sector entities, face an impossible choice: leverage world-class cloud infrastructure or maintain strict data residency and operational sovereignty. AWS is betting that enough enterprises will pay a premium to resolve this dilemma.

But let’s be clear: this isn’t just another AWS region with a different flag. It’s a fundamentally different operational model, and executives need to understand what they’re actually buying.

Building the MAP Portal: How AI-Powered Development Accelerated Our AWS Migration Hub

Building the MAP Portal: How AI-Powered Development Accelerated Our AWS Migration Hub

Executive Summary

From a workshop conversation at AWS re:Invent to a production-ready application in just 14 days of active development—spanning 35 calendar days including the Christmas holidays. That’s the power of AI-driven development.

We built a comprehensive AWS Migration Acceleration Program (MAP) portal featuring 14 content pages, interactive calculators, AI-powered chatbot, user authentication, and cloud-synced personalization. From idea to working MVP: 4 days. From MVP to production: 14 days of active development.

AWS Landing Zone Accelerator - Part 6: Security

Welcome back to our deep dive into the AWS Landing Zone Accelerator (LZA)!

In the previous five parts of this series, we’ve covered a lot of ground:

• Part 1: Introduced the LZA and its benefits for building a well-managed AWS environment
• Part 2: Walked through setting up your AWS Organization and creating new accounts
• Part 3: Explored the LZA’s global settings for standardized configurations across your AWS organization
• Part 4: Delved into the LZA’s network configuration, establishing a secure and scalable network foundation
• Part 5: Tackled Identity and Access Management (IAM), including setting up IAM Identity Center, break-glass access, and temporary elevated access.

In this sixth installment, we’ll shift our focus to a critical aspect of any well-architected cloud environment: Security. We’ll explore how the LZA helps you establish a secure baseline for your AWS workloads, but we’ll also go beyond the LZA’s default security configuration. I’ll explain the rationale behind some of our decisions to use custom solutions instead of relying solely on the LZA’s native security features, giving you a deeper understanding of how to tailor your security posture to your specific needs. Get ready to dive into the world of security best practices and learn how to fortify your AWS environment!

AWS Landing Zone Accelerator - Part 5: Identity & Access Management

Welcome back to our ongoing exploration of the AWS Landing Zone Accelerator (LZA)!

We’ve made some solid headway together. As you’ll recall, in Part 1, we kicked things off by introducing the LZA and highlighting its key benefits for building a robust and well-managed AWS environment. We then rolled up our sleeves in Part 2, walking through the essential steps of setting up your AWS Organization and creating those all-important new accounts. In Part 3, we delved into the LZA’s global settings, learning how to establish standardized configurations across your entire AWS organization, ensuring consistency and streamlined management. And as we just covered in Part 4, we’ve recently taken a detour into the foundational networking capabilities.

AWS Landing Zone Accelerator - Part 4: Networking

Welcome back to my deep dive into the AWS Landing Zone Accelerator (LZA)!

We’ve made some good progress. In Part 1, we introduced the LZA and its benefits for building a well-managed AWS environment. Part 2 walked through setting up your AWS Organisation and creating new accounts. Then, in Part 3, we explored the LZA’s global settings, which allow for standardised configurations across your entire AWS organisation, ensuring consistency and simplified management.

Now, I’m going to shift our focus to a critical aspect of any AWS environment: networking. This part of the series will delve into the network configurations provided by the LZA, exploring how it helps you establish a secure, scalable, and well-structured network foundation for your AWS workloads.

AWS Landing Zone Accelerator - Part 3: Configuring Global Settings for Your Organization

Welcome back to my deep dive into the AWS Landing Zone Accelerator (LZA)!

We’ve made some good progress so far. In Part 1, we introduced the LZA and explained how it can help you build a well-managed AWS environment. In Part 2, we got hands-on and learned how to set up your AWS Organization and create new accounts.

Now, in Part 3, we’re going to take a broader perspective and explore the global settings that the LZA provides. These settings let you establish standardised configurations across your entire AWS organization, ensuring consistency and simplifying management.