During July 2025, Orange Lumpy Custard upgraded the Virus Scanner module within the nhsconnect/national-document-repository-infrastructure repository, focusing on enhancing cloud storage security through Infrastructure as Code. Using Terraform and HCL, they delivered a patch-based enhancement that applied the latest virus scanning updates while ensuring compatibility with existing Terraform state and minimizing downtime. Their approach emphasized clear documentation to support audit trails and future upgrade readiness. Although the work spanned a single feature without bug fixes, it demonstrated a methodical application of security patching and version control practices, resulting in a more robust and auditable infrastructure deployment process.