The original title is: "I built an AWS access recertification engine that actually enforces the decision"

Short summary

Developer built VIGIL, an open-source AWS tool that closes the gap between access recertification decisions and enforcement. Unlike traditional reviews that generate approval records without revoking permissions, VIGIL discovers resources, captures owner decisions, and immediately applies narrowly-scoped changes via async SQS workers. The system includes cryptographic audit trails and rollback capability for compliance evidence.

• •VIGIL enforces access recertification decisions immediately, not months later
• •Uses async SQS workers to apply narrowly-scoped changes that never over-revoke
• •Includes cryptographic audit trail, rollback, and extensible connectors for AWS resources

Generated with AI, which can make mistakes.