File-scoped non-negotiables for authoring or reviewing Cloudflare Workers in TypeScript. Module Workers syntax only; Env interface generated from wrangler.jsonc via wrangler types; no secrets in logs; waitUntil for fire-and-forget; subrequest budgets respected; named bindings only. Loads when editing wrangler config…
Tactical playbook for authoring or reviewing Cloudflare WAF rules across all three authoring interfaces - Terraform (cloudflareruleset), the Cloudflare Dashboard, and the Rulesets API. Covers both Custom Rules (phase httprequestfirewallcustom) and Managed-Rule Exceptions / skip rules (phase…
AWS-specific IAM guidance covering principal types, policy evaluation, cross-account assume role patterns, SCPs, KMS key policies/grants, and AccessDenied debugging.