Operate the data services: Aurora PostgreSQL (TLS, PITR, Global Database), MSK, S3 zones with Object Lock and cross-region replication, ECR, Secrets Manager and AWS Backup, plus Keycloak, Prometheus and OpenTelemetry on the cluster. Build the AWS Organization as code: separate accounts for management, security, log archive, sandbox, test, staging and production, plus OUs, IAM Identity Center with MFA, and organization-wide CloudTrail and Config.