Worked on the ministryofjustice/modernisation-platform-environments repository, delivering two core infrastructure features focused on security and operational reliability. Implemented S3 replication in the preproduction environment by provisioning a destination bucket with versioning and public access block, and configured an IAM role policy to enable secure replication actions. Additionally, refined security group rules to harden OAS-RDS database connectivity on port 1521, removing outdated ingress and egress permissions to ensure only necessary access remained. Leveraged AWS, Terraform, and HCL to deliver auditable, policy-aligned changes that improved the platform’s security posture and readiness for production deployment, with a focus on maintainability and compliance.