Developed and delivered the initial VM Workload Scanning capability for AWS within the sysdiglabs/terraform-aws-secure repository, enabling agentless scanning of workloads across both single-account and organizational AWS environments. The solution leveraged Terraform and CloudFormation StackSets to automate the creation of IAM roles and policies for secure ECR image pulling and optional Lambda function scanning, supporting scalable multi-account deployments. Addressed a cloud authentication integration issue by correcting the handling of IAM role identifiers, ensuring compatibility with authentication services. The work demonstrated a strong focus on cloud security, infrastructure as code, and robust AWS IAM management using HCL and related technologies.