Kristina Lagasca

Projects

Things I build on my own time.

my-checkov-policies

A Checkov policy library for the Terraform and CloudFormation checks the defaults miss.

Problem
Open-source IaC scanning misses organization-specific patterns, and forking the upstream repo to add rules makes it painful to stay current.
Approach
A standalone custom policy library that extends Checkov without touching the upstream repository, covering Terraform and CloudFormation, including both Terraform source and plan output.
Outcome
Policy-as-code enforcement for rules the defaults don't cover, with upstream updates staying clean.

Checkov · Terraform · CloudFormation · Python

my-checkov-policies on GitHub

Cloud Security Portfolio

A hands-on cloud build, because reading about secure architecture is not the same as running it.

Problem
Secure infrastructure patterns only really land once you have built them and lived with the tradeoffs.
Approach
A cyber-security focused cloud portfolio provisioned entirely as code, with AWS, Terraform, and GitHub Actions handling the deploys.
Outcome
A live reference for secure infrastructure design and automation practices that I keep extending.

AWS · Terraform · GitHub Actions

kristinamarie.me