Independent AWS Infrastructure & Security Architect. Securing, automating, and optimizing AWS since 2017.
Based in France, working worldwide. Focused on security reviews, architecture, DevSecOps, and FinOps for large-scale and mission-critical AWS environments. 19+ years in IT, 9+ years on AWS, 6x AWS Certified.
This GitHub is where I share side projects, tooling, and experiments from my consulting work. Most active development happens under @zoph-io.
- AWS Architecture: design, review, and optimize AWS infrastructure for security, scalability, and cost.
- Security Audits & Hardening: identify vulnerabilities and implement defense-in-depth across AWS accounts and Organizations.
- Automation & DevSecOps: Infrastructure as Code, CI/CD, and automated security controls.
- Cloud Cost Optimization: actionable FinOps recommendations and automation.
- unusd.cloud: the garbage collector for your AWS account. Identify unused resources to cut cost and shrink attack surface.
- IAMTrail: full version history and diffs for 1,525+ AWS Managed IAM Policies, archived since 2019 (source).
- AWS Security Survival Kit: opinionated security monitoring and alerting baseline for AWS accounts.
- Subnet Watcher: CloudWatch metrics for available IPs in VPC subnets, with proactive alerts.
- AWS Trustline: analyze IAM and S3 policies to surface third-party and external access.
More on github.com/zoph-io.
Organizer and CFP reviewer for fwd:cloudsec Europe, Europe's vendor-neutral cloud security conference. Berlin 2025, then London 2026.
I write about AWS security, cloud architecture, and DevSecOps on zoph.me.
hello@zoph.io · Book a call · zoph.io
That's all, folks!
zoph.