AWS DevOps, Terraform & Kubernetes — field notes.

Straight comparisons and guides from 16+ years shipping production AWS.

• SOC 2 vs ISO 27001 (2026): Which First?
  What each proves, who asks for which, cost, timeline and how to sequence them - from a CISA + AWS Solutions Architect Professional.
• How to Pass SOC 2 Type 2 (2026)
  A practical 7-step roadmap on AWS - scope, controls, evidence automation and the observation window.
• AWS Compliance Controls Mapping (SOC 2 / PCI / ISO)
  How IAM, KMS, CloudTrail and Config map to SOC 2, PCI DSS and ISO 27001 - and the evidence each produces.
• vCISO vs Compliance Consultant: Which Do You Need?
  Ongoing security leadership vs a one-off project — when a fractional CISO makes sense for SOC 2 / ISO 27001.
• How a Fractional CISO Gets You SOC 2-Ready
  The real 8-14 week roadmap: AWS controls, evidence automation, and handling security questionnaires.
• Terraform vs CloudFormation (2026)
  Terraform vs CloudFormation compared for AWS in 2026 — multi-cloud, modules, state, drift, ecosystem and when each wins, from a CISA + AWS Solutions Architect Professional.
• EKS vs ECS (2026)
  Amazon EKS vs ECS compared for 2026 — control, portability, operational overhead, cost and when each wins, from a CISA + AWS Solutions Architect Professional.
• GitHub Actions vs GitLab CI vs Jenkins
  GitHub Actions vs GitLab CI vs Jenkins compared for 2026 — hosting, maintenance, security, scale and when each wins for AWS CI/CD, by a CISA + AWS Solutions Architect Professional.
• ArgoCD vs Flux (2026)
  ArgoCD vs Flux compared for 2026 — UI, multi-tenancy, footprint, progressive delivery and when each wins for Kubernetes GitOps, by a CISA + AWS Solutions Architect Professional.