A breakdown of building a CLI tool to audit AWS Security Groups at scale — architecture decisions, failure modes, and what production-ready security tooling actually looks like.