Worked on enhancing the lacework/terraform-aws-config repository by delivering a targeted AWS IAM policy update that enables the Glue GetWorkflows permission, allowing programmatic retrieval of workflow information from AWS Glue. The approach focused on a minimal, well-scoped change to reduce risk and avoid expanding the policy’s blast radius, supporting secure automation and improved governance. Leveraged Infrastructure as Code principles using HCL and Terraform to integrate the new permission seamlessly into the existing policy framework. The work demonstrated careful code review and secure change management practices, ensuring that workflow discovery capabilities were added without introducing defects or unnecessary complexity.