Building secure, production-style AWS infrastructure in public — one project at a time. ECS Fargate, Terraform, and CI/CD pipelines where security scanning is a gate, not an afterthought.
A Flask REST API deployed on AWS ECS Fargate through a security-first CI/CD pipeline. GitHub Actions authenticates to AWS via OIDC — no stored access keys — and every push must clear automated tests, Trivy container scanning, and tfsec infrastructure scanning before deploy runs.
Least-privilege IAM roles for both the ECS task execution role and GitHub OIDC deploy role, scoped to specific actions and resource ARNs
Documented .trivyignore policy — every suppressed CVE justified against the Debian Security Tracker rather than silently disabled
Diagnosed a live AssumeRoleWithWebIdentity failure via CloudTrail event analysis — root cause was a GitHub sub-claim ID-suffix mismatch in the trust policy
Force-redeploy step ensures ECS actually pulls the newly built image on every push, not just on infrastructure changes
A DevOps-driven task management platform built to demonstrate a complete production-style workflow end to end: containerization, CI/CD, Kubernetes orchestration via Helm, infrastructure as code, and monitoring — wrapped around a lightweight frontend, since the deployment pipeline is the point of the project, not the app.
Packaged and deployed the app to Kubernetes (AWS EKS) using a custom Helm chart, rather than raw manifests
Provisioned the VPC and EKS cluster with Terraform
GitHub Actions pipeline builds the Docker image and pushes it to GitHub Container Registry on every push to main
Nginx ingress routes traffic into the cluster; Prometheus and Grafana monitor the running service
A full-stack e-commerce platform running on Kubernetes via AWS EKS, with PostgreSQL persistence through RDS and JWT-based authentication for API access. Observability is built in from the start.
PostgreSQL persistence layer provisioned through RDS, wired into the EKS cluster
JWT-based authentication securing API access across services
Prometheus and Grafana dashboards tracking cluster health and application performance in real time
A Flask REST API on AWS ECS Fargate backed by DynamoDB, with all infrastructure — networking, IAM, container orchestration — provisioned through Terraform.
All infrastructure provisioned as code, including networking, IAM roles, and container orchestration
Refined after external review to correct infrastructure and code issues, improving deployment reliability
Open to Cloud & DevOps roles — happy to walk through any of these projects, the debugging decisions behind them, or how a specific piece of infrastructure was built.