Support server-hardening efforts, OS patching, vulnerability remediation, SSH configuration, SSL/TLS configuration, and access-control improvements. • Support AWS-hosted web application environments, including EC2, VPCs, security groups, IAM, Route53, CloudWatch, S3, backups, and load balancers.