This site: static hosting on AWS with Terraform and OIDC
A personal site treated as a production system: private S3 behind CloudFront, two Terraform stacks and a single GitHub Actions pipeline with no stored AWS keys.
Projects
Case studies from work and personal projects: the context, what I did and the results.
Observability platform on AWS EKS
Operated and evolved a Kubernetes-based logs and metrics platform: moved it to another AWS region, upgraded its core components and extended it to cover data pipelines.
Rolling out AWS WAF without breaking production
Took public ingestion endpoints from an allow-all web ACL to layered WAF protection, validating every rule in count mode before blocking.
Terraform CI/CD for AWS environments
Built and hardened Azure DevOps pipelines that provision AWS with Terraform, cutting deployment time by ~47% and closing a path for accidental production applies.