Continuous PCI DSS Segmentation Testing on AWS — with VPC Reachability Analyzer and a Bedrock-Powered QSA Assistant

How I turned a quarterly, spreadsheet-driven compliance chore into an event-driven serverless pipeline that tests segmentation within minutes of every relevant network change — and how, along the way,