During December 2025, Sarisia focused on enhancing security and compliance in the phuhung273/aws-cdk repository by addressing a critical bug related to S3 policy attachment for AWS CloudTrail organization trails. Using TypeScript and AWS CDK, Sarisia implemented a guardrail that prevents attaching S3 bucket policies when the orgId is missing, thereby avoiding improper permissions. The solution included comprehensive unit tests to validate the guardrail’s behavior and emit warnings when required configuration values, such as orgId or trailName, are absent. This work improved the reliability of cloud infrastructure provisioning and demonstrated careful attention to configuration validation and security best practices.