Tudovu07:30

A morning with Snippy.

Your cloud gets a colleague that reviews, proposes and proves, and you answer yes, no, or reviewed.

Every morning, always07:30 · Slack

The briefing lands whether or not anything happened.

Conclusion first, only what changed, one line on what it wants from you.

SSnippy · #cloud-ops

Morning briefing, Tue 8 Sep Posture: 78 → 79 · 141 pass / 28 fail New overnight: AC-S3-004 regressed, uploads bucket public again fix drafted: block public access · PR ready Also: api-2 accepts IMDSv1 (AC-EC2-007) · PR ready Open PRs from me: #216 and #217, awaiting your review Budget: 11 of 40 turns used yesterday. Snippy: react ✅ to open the PRs. A person merges.

A finding with a fix07:32

One reaction opens a pull request the fix was already written for.

The bucket went public overnight. The fix is CloudFormation in your repo, the check it satisfies named in the body.

DDavid

✅ on the briefing

SSnippy

Proposed: block public access on aster-ridge-uploads (AC-S3-004) UploadsBucket: Type: AWS::S3::Bucket + PublicAccessBlockConfiguration: + BlockPublicAcls: true + RestrictPublicBuckets: true Guardrails: pass · 1 resource touched · nothing removed React ✅ to open the PR. I don't apply changes; a person merges.

Your merge is the change09:05 · GitHub

Nothing moves until you merge.

Your own deploy workflow applies it, the check runs again, and the evidence goes in the case file.

✓#219 opened: block public access on aster-ridge-uploads

✓Deploy preview planned the change set on the PR

✓David merged

✓tudovu-deploy-infra deployed the stack

✓AC-S3-004 PASS · evidence recorded on ASTER-402

ReclaimerTuesday afternoon

The app on that one box, moved without a weekend.

One read-only script, six questions, a generated stack. It rehearses idle before it serves, and the data goes with every row counted.

✓discover · wiki on i-0ec7d…, Postgres beside it, 412 MB

✓convert · Fargate + RDS, PR #147, every value explained

✓deploy-and-leave · submitted idle in 41 s, CI job exits

✓rehearsal · one task, its own health check: healthy

✓migrate · 21 / 21 tables, 187 MB of files, counts match

✓cutover · protected · unfreeze if you must

DocumentarianWednesday · a questionnaire

The auditor's question, answered from the record.

When there is no source it says so, and leaves the question open for a person.

SSnippy · questionnaire

Q: Are storage buckets protected from public access? A: Yes. 14 of 14 buckets have public access blocked. Evidence: check AC-S3-004, last run 09:11 today; PR #219 merged by David, 09:05; case ASTER-402. Q: Is there a formal vendor risk process? A: No source found. Nothing in policies or evidence says so, so I have left it unanswered. Add the policy or tell me.

Tudovutudovu.com

Every change is
a pull request.

You merge it. Start free in about five minutes, with no card.

Snippy Architect Plumber Reclaimer Documentarian