IDEAS, DECISIONS & LESSONS

Journal

Notes on AI, architecture and building useful products.

1 articles

18 Feb 2026 · 7 min read

aws

AWS Full-Stack Mastery: Security with IAM, Cognito, WAF & Secrets Manager (Part 8 of 10)

Part 8 of 10 — Implement production security for a children's platform: least-privilege IAM policies, Cognito user pools with COPPA-compliant parental consent flows, WAF rule groups, KMS encryption, Secrets Manager auto-rotation, and GuardDuty threat detection.