#GCP

Terraform plans as locked S3 evidence, Rego policies for NIST controls across GCP and AWS, and a Conftest gate wired into GitHub Actions — plus passing the CGE-AUD exam.

A reusable Terraform module for GCS buckets with NIST SP 800-53 controls baked in — CMEK, retention, uniform access — where consumers can't turn compliance off.