Cloud & Infrastructure Projects

Designed and deployed complete AWS infrastructure for a production SaaS application — a network monitoring dashboard for telecom engineers. Built the full deployment pipeline from Terraform modules to live EC2 production, with a clean ECS migration path already defined.

• MVP: Single EC2 host, Nginx (frontend / + /api proxy), PostgreSQL on-host
• HTTPS: Let's Encrypt via Certbot with auto-renewal on EC2
• CI/CD: GitHub Actions → build frontend → bundle → S3 upload → SSM Run Command (OIDC, zero hardcoded credentials)
• Deploy: Tag-based EC2 targeting, zero-downtime deploy script via SSM
• Secrets: AWS Parameter Store for SECRET_KEY and DB_PASSWORD at runtime
• Infra: Terraform modules for VPC, EC2, Elastic IP, Route53, S3, CloudWatch alarms, IAM roles
• Roadmap: ECS + ALB + multi-AZ already architected in infra repo

Built modular Terraform infrastructure provisioning separate dev and prod environments on AWS. Implemented GitHub Actions CI/CD pipeline with AWS OIDC for secure, credential-free deployment.

• Separate dev/prod environments via Terraform workspaces/modules
• GitHub Actions CI/CD with OIDC role assumption (no hardcoded credentials)
• VPC with public/private subnets, NAT gateway, route tables
• ECS cluster + ECR registry for containerized app deployment
• Remote state: S3 backend + DynamoDB state locking

GitHub Actions
   |
   | OIDC
   v
AWS IAM Role -> Terraform Apply
   |
   +-> VPC
   |    +-> Public Subnets -> ALB
   |    +-> Private Subnets -> ECS Services
   |
   +-> ECR
   +-> S3 + DynamoDB (Remote State)

Designed and optimized multi-stage Docker images to minimize production image size. Configured container networking, Docker Compose orchestration, and resource constraints — patterns applied directly to the SaaS dashboard project below.

• Multi-stage Dockerfile for optimized image size
• Docker Compose for local multi-container orchestration
• Container networking and port mapping configuration
• Resource limits and health check configuration

Source Code
   |
   v
Multi-stage Docker Build
   |
   +-> Optimized Runtime Image
   |
   v
Docker Compose
   +-> Web Container
   +-> Service Networking
   +-> Port Mapping + Health Checks