Andrzej Skrodzki
I break and harden cloud infrastructure — finding the gaps in AWS, Kubernetes, and IAM before attackers do, then closing them. I write about what actually breaks in production.
Selected work
kubescout Detects runtime RBAC drift in Kubernetes clusters. iam-lint Scans AWS IAM policies for over-permissive grants.Writing
How SCPs really evaluate cross-account conditions A Kubernetes RBAC pattern that silently grants cluster-adminIdeas · notes
GuardDuty has a blind spot on VPC endpoint traffic