Projects
AWS Cloud Resume Challenge (This online CV/Resume)
As a super AWS enthusiast, I've created my own professional CV and hosted it as a static website using Amazon Web Services (AWS) S3 ☁️ 🚀
During this process, I set up a full CI/CD pipeline that pushes code directly to S3 when I merge the code to GitHub.
👨💻 This website is stored in AWS S3 and utilises a CloudFront distribution to serve the website globally.
The domain name for the website was acquired AWS Route53. The SSL certificate for it was obtained from Amazon Certificate Manager and the custom domain was configured in Route53
Terraform used to create and deploy the S3 bucket, CloudFront distribution and the policies that go along with it.
Programming Languages & Tools used in this project:
- HTML, CSS, Javascript
- CI/CD
- Github & Github actions
- Python (boto3)
- AWS (S3, IAM, CloudFront, Route53, ACM Certificate Manager, Codepipeline, Lambda)
- GitHub
- Terraform
AWS Control Tower Implementation
Led design and deployment of an AWS Control Tower Landing Zone across 12+ AWS accounts and 15+ teams, integrated with an existing AWS Organization. Established standardized security baselines, guardrails, and account provisioning workflows for enterprise-scale governance.
Defined OU strategy, SCP patterns, and baseline controls to support secure growth while maintaining delegated ownership for platform and application teams.
Governance services & tools used in this project:
- AWS Control Tower
- AWS Organizations (OUs, SCPs)
- AWS IAM Identity Center (SSO)
- AWS CloudTrail & AWS Config
- Terraform
- GitHub Actions
Hybrid Connectivity Management
Built and managed Site-to-Site VPN and AWS Direct Connect connectivity to deliver reliable, high-performance links between on-premises data centers and AWS cloud infrastructure.
Designed and implemented AWS Transit Gateway architecture, connecting a shared networking account to enable secure transitive routing across multiple VPCs and accounts.
Standardized route propagation and segmentation to improve resilience, simplify troubleshooting, and reduce blast radius across environments.
Networking services & tools used in this project:
- AWS Direct Connect
- AWS Site-to-Site VPN
- AWS Transit Gateway
- VPC Route Tables
- BGP Routing
- CloudWatch
Brownfield Console-to-IaC Transformation
Led brownfield environment conversion from console-managed resources to Infrastructure as Code using Terraform in a production estate with approximately $500k monthly AWS spend.
Delivered phased import/refactor plans, state normalization, and reusable modules to reduce manual drift and improve auditability across critical workloads.
IaC migration tools used in this project:
- Terraform
- AWS CLI
- GitHub
- GitHub Actions
- Python (boto3)
- AWS IAM
AWS EKS Platform Engineering
Designed and deployed AWS EKS environments with secure multi-namespace architecture, managed node groups, and ingress patterns for internal and public workloads.
Implemented CI/CD-driven deployment pipelines and operational guardrails including logging, metrics, autoscaling, and least-privilege IAM role mapping for Kubernetes teams.
Container platform & deployment tools used in this project:
- AWS EKS
- Kubernetes
- Helm
- Docker
- Terraform
- GitHub Actions
- CloudWatch Container Insights
