Worked on the circleci/circleci-docs repository to deliver a security-focused feature that hardens audit logs streaming through AWS IAM policy improvements. The approach involved adding a subject condition to the IAM policy, removing unnecessary GetObject and s3:ListBucket permissions, and simplifying the S3 permissions surface to reduce potential risk and streamline compliance reviews. Introduced a connectivity verification note using adoc documentation to help operators validate end-to-end permissions. All changes were documented with clear commit references, supporting traceability and maintainability. The work leveraged AWS, cloud security best practices, and technical documentation to enhance reliability and operator confidence in audit log workflows.