Abdalrahman AttyaPlatform engineering · AWS and Azure
Secure Self-Service Cloud Platform
An internal developer platform for submitting cloud environment requests through a portal, API, or command line. Policy produces deterministic evidence for human review before any protected delivery handoff.
- Release
- v1.0.0 stable simulation
- Evidence
- Portal, API, CLI, proposals, and validation
- Boundary
- AWS and Azure targets remain unapplied
The workflow
A developer describes the required environment. Fail-closed policy evaluates ownership, cost, networking, encryption, logging, and expiry, then produces a reviewable proposal with stable identifiers and content hashes.
The public release demonstrates the complete credential-free request and evidence flow. Terraform roots and protected workflows show the intended provider handoff without implying that a cloud environment was created.
Architecture
A review boundary before cloud delivery
Engineering decisions
- Readable policy feedback explains why a request passes or fails.
- Deterministic evidence includes request IDs, fingerprints, hashes, and expected resources.
- Provider separation keeps AWS and Azure roots independently reviewable.
- Protected handoff uses short-lived identity boundaries and human review.