I Built an AI Agent That Fixes Your AWS Security Issues — Here's Every Technical Decision That Made It Safe

Every AWS account has a graveyard. A public S3 bucket from a hackathon. An IAM user with AdministratorAccess that was "just temporary." A security group open to 0.0.0.0/0 because debugging was easier