Least privilege
Access should be scoped to the work at hand, reviewed regularly, and removed when no longer needed.
Security
Security posture
Cloud work is only useful when it can be operated safely. Cloud Engineering Project treats access control, change discipline, and recovery planning as core engineering work.
Change visibility
Infrastructure changes should be reviewable, documented, and connected to a clear rollback path.
Secrets discipline
Credentials belong in dedicated secret stores or protected environment configuration, not in source files.
Operational checks
Health endpoints, service ownership, logs, and alert routes should be understandable before incidents happen.
Responsible contact
Security reports and operational concerns can be sent to hello@cloud-engineering.site.