Mamadou Wane

Cloud Engineering Cloud Security

Cloud systems that have to prove themselves. sapper blocks unsafe infrastructure in code, detects what drifts in after deploy, and remediates only with human approval, evidence for every action. One thesis, two projects: define the blast radius, prove the system fails safe, and measure whether it does. Next: the same thesis under controlled fault injection.

cloud aws
iac terraform
automation python

Diagram: Terraform provisions an AWS environment with security, compute, and storage services.

infra — terraform
$ terraform plan

No changes. Your infrastructure
matches the configuration.
ci gate — checkov
$ checkov -d ./terraform --quiet
terraform scan results:

Passed checks: 26, Failed checks: 0,
Skipped checks: 0
audit — aws cli
$ aws configservice \
    describe-configuration-recorder-status
"name": "sapper-config-recorder",
"recording": true, "lastStatus": "SUCCESS"

$ aws securityhub get-enabled-standards
"StandardsStatus": "READY"
01Cloud Engineeringbuild the platform
02Infrastructure as Codedefine the blast radius
03Cloud Securityprove it fails safe
04Observabilitymeasure whether it does
05Automationremediate, human-gated
01

Featured Project

sapper

Phase 1 — in progress

AWS security guardrails and human-gated remediation, built evidence-first with Terraform, AWS Config, Security Hub, Checkov, and Python.

  • Terraform
  • AWS Config
  • Security Hub
  • Checkov
  • Python
View on GitHub ↗
next project 02 applies the same thesis to reliability: prove the system fails safe under controlled fault injection. queued
02

Resume

A formal resume is being finalized. In the meantime, the work speaks for itself on GitHub: commits, infrastructure code, and security gates.

resume.pdf · coming soon GitHub activity ↗
03

Contact