Worked on security hardening for the uktrade/platform-tools repository by delivering restricted IAM roles for ALB DNS management, cache invalidation, and ALB/CDN secret rotation. Leveraged AWS, Terraform, and HCL to implement dynamic ARN naming based on application and environment, enhancing both security and maintainability of infrastructure as code. The approach enforced least-privilege access for sensitive operations, reducing the blast radius and improving auditability. No major bugs were addressed during this period, as the primary focus was on strengthening the security posture and laying the groundwork for ongoing automation and compliance improvements within the platform-tools infrastructure codebase.