#CGE-P

Terraform plans as locked S3 evidence, Rego policies for NIST controls across GCP and AWS, and a Conftest gate wired into GitHub Actions — plus passing the CGE-AUD exam.

A reusable Terraform module for GCS buckets with NIST SP 800-53 controls baked in — CMEK, retention, uniform access — where consumers can't turn compliance off.

A hands-on Terraform module for a compliant AWS S3 bucket, wired with NIST SP 800-53 controls from the start — plus a Policy-as-Code gap I found along the way.