HIPAA
+3

May 1, 2026
•
2 min read
Public subnets, NAT gateways, and "we restrict by security group" don't survive a HIPAA review. Here's the pattern that does.

AWS Cost
+1

Apr 26, 2026
•
2 min read
A screenshot is not evidence. A Slack message is not a control. Here's what works.

Field notes on AWS infrastructure, HIPAA, and SOC 2 for health tech engineering leaders.