Automation on DevOps & Rock'N'Roll

Letting Claude loose on an AWS account with Prowler

Tue, 11 Aug 2026 00:08:30 +0000

I had been meaning to run a proper security audit of one of our AWS accounts for months. The task kept losing to more urgent things, because it isn’t a single job — it’s install a scanner, work out its permissions, run it for an hour, then read several thousand findings and decide which twelve actually matter.

So I gave the whole thing to Claude Code and watched. The interesting part wasn’t that it worked; it was where the effort actually went.

Azure Pipelines YAML validation: full throttle

Fri, 29 Sep 2023 00:08:30 +0000

I have been using Azure Pipelines as my primary CI system of choice for few years now, and, while I don’t find it perfect, I always feel big power inside its YAML templating and rich API capabilities.

This post will be a guide on how to maintain a set of YAML templates for CI pipelines and validate changes to them. The set of YAML templates is commonly placed outside of application repos and are referenced by smaller portions of YAML on the corresponding app repos.