My writing appears across several publications, covering AI security, cloud security, and compliance.
AWS Well-Architected Framework
Contributing author to AWS best practices documentation.
AWS Security Blog
- Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline — with Rodolfo Brenes, Satish Uppalapati, and Sowjanya Rajavaram (September 15, 2026)
- Threat tactic spotlight: Subdomain takeover — with Matt Gurr, Ariam Michael, and Geoff Sweet (June 16, 2026)
- How to manage the lifecycle of Amazon Machine Images using AMI Lineage for AWS — with George’son Tib, Geoff Sweet, and Bharat Lakhiyani (March 12, 2026)
- How to Improve Security Incident Investigations Using Amazon Detective Finding Groups
- Announcing the AWS Blueprint for Ransomware Defense
- Minimize Risk Through Defense in Depth: Building a Comprehensive AWS Control Framework
- Provisioning Access to Security and Audit Teams in an AWS Multi-Account Environment Created by AWS Control Tower
Solutions on GitHub
Deployable code that accompanies the posts above. All three are open source under aws-samples.
- IAM remediation through your CI/CD pipeline — Reads IAM Access Analyzer findings, works out how each role was created by reading CloudTrail, then opens either a pull request with generated CDK or an issue with guidance. Python and AWS CDK. (post)
- Dangling DNS detection — An AWS Config custom rule that finds CNAME records in Route 53 pointing at deleted S3, CloudFront, and Elastic Beanstalk resources, and reports them to Security Hub. Python. (post)
- AMI lineage governance — Tracks how Amazon Machine Images derive from one another across an AWS Organization, using a Neptune graph database and AWS Config for compliance checks. Python. (post)
ScaleSec Blog
ITware LATAM
Bylined articles on AI security and cloud strategy for Latin American audiences.
Revista Cloud Computing
Revista Ciberseguridad
- El punto ciego de la seguridad en IA: cuando los sistemas no saben qué es una orden y qué es un dato
Heraldo USA
Columns and features on technology and security topics.
Links to individual articles are being added. If you’re looking for a specific piece, reach out.