← Portfolio

Infrastructure-as-code agent

Secure-by-default cloud templates and checks, written so that a coding agent can build a compliant environment from a skill file.

Skill fileInstructions the agent follows
Coding agentScaffolds the environment
Pulumi modulesSecure defaults for Azure
Policy and testsCrossGuard policy pack and compliance tests
Deployed environmentGoverned from the start
From a request to a governed environment. Architecture sketch.
My role
Lead; primary author
Years
2025–2026
Built with
Pulumi, CrossGuard, Python, GitHub Actions
Cloud
Azure

The problem

Every proof of concept needs cloud infrastructure that is secure and compliant, and setting it up from scratch each time is slow.

What I built

Why it matters

The rules are written once as code and enforced the same way every time, so teams start from a compliant baseline.

Outcome