# zoph.me

> Personal weblog of Victor Grenu, an Independent AWS Cloud Consultant with over 20 years in IT. Notes on IAM, cloud security, architecture, automation, FinOps, and indie consulting, with a focus on the AWS ecosystem. Author of open-source AWS tools and the products unusd.cloud and IAMTrail.

## About

- [Who am I](https://zoph.me/whoami/): Victor Grenu, Independent AWS Cloud Consultant. Background, active quests, and where to find me online.

## The zoph.io galaxy

All of the following are operated by Victor Grenu through zoph.io, an independent AWS consulting boutique.

- [zoph.io](https://zoph.io): The consulting boutique. AWS architecture, security audits and hardening, automation and DevSecOps, cloud cost optimization, and secure AI and LLM adoption.
- [zoph.me](https://zoph.me): Personal weblog on AWS, IAM, cloud security, architecture, automation, FinOps, and indie consulting.
- [unusd.cloud](https://unusd.cloud): SaaS that runs read-only AWS cost and waste scans across 30+ services and every region, with a weekly digest email and Navi, an AI layer grounded in your scan findings.
- [IAMTrail](https://iamtrail.com): Archive of every change to AWS Managed IAM Policies since 2019, with full version history and diffs, plus AWS endpoint and GuardDuty change feeds.
- [github.com/zoph-io](https://github.com/zoph-io): Open-source AWS tooling, including ClickOps Sentinel, AWS Security Survival Kit, AWS Trustline, and Subnet-Watcher.
- [fwd:cloudsec Europe](https://fwdcloudsec.org/conference/europe/): Vendor-neutral cloud security conference. Victor is an organizer and CFP reviewer.

## Open-source projects

- [ClickOps Sentinel](https://github.com/zoph-io/clickops-sentinel): AI-powered detection of AWS Console (ClickOps) changes. EventBridge + a Claude agent on Amazon Bedrock, alerting to Slack, Teams, or rich HTML email.
- [AWS Security Survival Kit](https://github.com/zoph-io/aws-security-survival-kit): Bare-minimum AWS security alerting and secure-by-default configuration for your accounts.
- [AWS Trustline](https://github.com/zoph-io/aws-trustline): Map and audit third-party trust relationships (IAM role trust policies and S3 bucket policies) and flag confused-deputy risks.
- [Subnet-Watcher](https://github.com/zoph-io/subnet-watcher): CloudWatch metrics and alerting for available IPs in VPC subnets.
- [qTweet](https://github.com/z0ph/qtweet): Serverless SQS to X (Twitter) speaker using Lambda and Secrets Manager.

## Key posts

- [Projects](https://zoph.me/projects/): Full list of open-source tools and side projects.
- [Introducing ClickOps Sentinel](https://zoph.me/posts/2026-07-19-clickops-sentinel/): AI context for AWS Console changes.
- [Thoughts on Indie AWS Consulting](https://zoph.me/posts/2024-08-25-thoughts-on-indie-aws-consulting/): Lessons from running an AWS consulting boutique.
- [Archives](https://zoph.me/archives/): All posts by date.

## Optional

- [Bluesky (@zoph.me)](https://bsky.app/profile/zoph.me)
- [GitHub (z0ph)](https://github.com/z0ph)
- [GitHub org (zoph-io)](https://github.com/zoph-io)
- [LinkedIn](https://www.linkedin.com/in/grenuv/)
- [RSS feed](https://zoph.me/index.xml)