Documenting my journey into cloud security and GRC engineering. Building skills in infrastructure security, policy-as-code, compliance automation, and developing an engineering mindset for security.