📍 Now — updated July 2026

What I'm working on

A running log of current focus, updated as things move.

• Security

  Clarified SQL credential rotation ownership boundary

  Documented the automated password-rotation pipeline for app-tier SQL logins — Lambda-driven, SSM-backed, DR-aware — and drew a clean line between app-owned credential lifecycle and DBA-owned provisioning.

• FinOps

  Multi-account cloud cost governance

  Extending tag-based cost tracking across a growing set of AWS accounts.

• Migration

  Database estate consolidation

  Splitting a large shared database into isolated clusters by product line.

• Architecture

  Lakehouse pattern evaluation

  Prototyping an Apache Iceberg-based lakehouse as a candidate next-gen architecture.