Multi-Account strategy and automation - Control Tower
CSS has deployed CT, AWS Organizations and SSO, but progress is extremely slow and they need expert support
They want to build out automation to provision accounts with necessary guardrails and controls. Potentially some customizations needed, IAM, Networking, etc.
Security Controls automation
Looking to automate "audit stuff"; e.g. Config rules, Security Hub, Audit Manager, Systems Manager
Decommissioning Chef infrastructure that is supporting a few Windows Apps
They have 90% of apps containerized (ECS/Fargate), but have a few straggler Windows applications. They want to migrate those over to the new containerized model and/or move them to new EC2 model so they can decommission their legacy Chef infrastructure.
Spot Instances
Want to move Dev/Test to a Spot framework. A lot of this infra is running in Fargate.