[donny@scyber ~]$ whoami

Donny Schreiber

I'm a cybersecurity consultant at Amazon Web Services (AWS). Over the last ~4.5 years, I've helped some of AWS's highest-profile customers secure over $4B of cloud infrastructure — no matter the industry: healthcare, government, telecom, aerospace & defense, financial-services, education-tech. I love learning about and helping solve complex problems for ... anyone — a Fortune 500, a friend, a local small business. I can't 'do it all'; nor do I want to. But if someone needs help, I'll show up, and I won't give up. Unless I'm told to... twice.

  1. Multi-Region IPAM on AWS

    AWS published my multi-Region IPAM architecture as Prescriptive Guidance, and I open-sourced the IPAM Terraform code (67 pools, 874 resources) on aws-samples.

    the pattern →
  2. Shift-left DevSecOps

    I rebuilt one customer's failing CI security scans into a suite of 15+ scanners that only scan what changed.

    how →
  3. GenAI platform security

    I wrote the threat model for a broker-dealer's Amazon Bedrock GenAI platform: 127 threats across 15 assets.

    related writing →

Latest writing

All posts →
· 6 min readnew
My Lane Is a Method

Security careers reward the one-word answer to "what's your lane?" — and I never had one. Then I lined up the things I actually built, from a 51-page VMware lab guide to an agentic-AI IAM tool, and found the lane was never a subject. It's a method.

PersonalCareer
· 13 min read
Home Network as Code: Zero-Trust Segmentation on a Prosumer Router

How I rebuilt my home network with the discipline I'd apply to production — Infrastructure-as-Code, zero-trust VLAN segmentation, per-client encrypted DNS — and where consumer hardware hits its limits.

NetworkingInfrastructureSecurity
· 10 min read
The Security Side of Vibe Coding: What AI-Generated Code Gets Wrong

I use these tools every day, and I'm also a security professional. A field report on what AI-assisted coding gets wrong — missing authentication, agents with too much access, secrets in the wrong place — from my own code and the research.

AI SecurityVibe CodingDevSecOps

Contact

Email and LinkedIn are the easiest ways to reach me. There's no contact form.

Email
LinkedIn
linkedin.com/in/donaldschreiber
Code
aws-samples/sample-amazon-vpc-ipam-terraform
Location
Colorado