A structured view of the cloud capabilities I have designed, built, and documented across architecture projects, labs, and technical training, organized by domain and experience level.
| Capability | Business Purpose | Architecture Decisions | Experience Level | Related Projects |
|---|---|---|---|---|
| Virtual compute | Scalable application hosting for stateful and stateless workloads | Instance sizing, auto-healing groups, placement across failure zones, launch templates | Hands-on | Highly Available Web Platform |
| Container orchestration | Portable, scalable workload deployment without server management | Service definitions, task scheduling, health checks, rolling deployments | Working Knowledge | Containerized Microservices Platform |
| Managed Kubernetes | Automated container scheduling, self-healing, and horizontal scaling | Node groups, namespaces, RBAC, ingress controllers, pod autoscaling | Working Knowledge | Containerized Microservices Platform |
| Serverless functions | Event-triggered compute with no server provisioning or management | Event sources, concurrency limits, timeout design, cold start mitigation, IAM roles | Hands-on | Scalable Serverless API |
| Elastic compute scaling | Automatic capacity adjustment to match demand without overprovisioning | Scaling policies, cooldown periods, predictive vs reactive scaling, target tracking | Hands-on | Highly Available Web Platform |
| Object storage | Durable, scalable, and cost-effective storage for unstructured data | Bucket policies, versioning, lifecycle rules, encryption, cross-region replication | Hands-on | All projects |
| Block storage | High-performance persistent volume storage for compute instances | Volume types (throughput vs IOPS), snapshots, encryption, instance attachment | Hands-on | Highly Available Web Platform |
| Shared file storage | Concurrent filesystem access across multiple compute instances | Mount targets, access points, performance modes, encryption | Hands-on | Highly Available Web Platform |
| Managed relational databases | Structured data with ACID compliance, automated patching, and backups | Multi-AZ standby, read replicas, parameter groups, encryption at rest, failover | Hands-on | Highly Available Web Platform |
| Managed NoSQL databases | High-throughput, low-latency key-value and document storage at scale | Partition key design, capacity modes (on-demand vs provisioned), TTL, global tables | Hands-on | Scalable Serverless API |
| Private cloud networking | Isolated network environment with controlled ingress and egress | CIDR allocation, public vs private subnets, NAT gateway, internet gateway, flow logs | Hands-on | All projects |
| Application load balancing | Traffic distribution across healthy compute instances with health checks | Target groups, listener rules, path-based routing, SSL termination, stickiness | Hands-on | Highly Available Web Platform |
| DNS and traffic routing | Service discovery, failover routing, and latency-based global traffic management | Record types, health checks, routing policies, alias records, zone delegation | Hands-on | Highly Available Web Platform |
| Content delivery and edge caching | Low-latency global content distribution with DDoS protection | Cache behaviors, TTL policies, origin access control, geo-restriction, WAF integration | Hands-on | Resilient Content Delivery Architecture |
| Centralized network transit | Hub-and-spoke connectivity for environment isolation and centralized routing | Route tables, attachment policies, network segmentation, inspection VPC patterns | Hands-on | Multi-Account Cloud Governance Foundation |
| Managed message queues | Decoupled, reliable asynchronous communication between services | Queue types (standard vs FIFO), visibility timeout, dead-letter queues, retry policies | Hands-on | Scalable Serverless API, Event-Driven Order Processing System |
| Publish/subscribe messaging | Fan-out event broadcasting to multiple independent subscribers | Topic types, subscription protocols, message filtering, delivery policies | Hands-on | Event-Driven Order Processing System |
| Event routing | Conditional event delivery and filtering across decoupled services | Event bus design, rules and targets, pattern matching, cross-account delivery | Hands-on | Event-Driven Order Processing System |
| API management | Secure, versioned API gateway with authentication, throttling, and monitoring | REST vs HTTP APIs, authorizers, usage plans, CORS, stage variables, caching | Hands-on | Scalable Serverless API |
| Identity and access management | Least-privilege access control for users, services, and cross-account access | Role design, policy evaluation, permission boundaries, service control policies, SSO | Hands-on | All projects |
| Encryption key management | Centralized control of encryption keys for data protection at rest and in transit | Key policies, automatic rotation, envelope encryption, cross-account key usage | Hands-on | All projects |
| Web application firewall | Layer 7 threat protection against common web exploits and bot traffic | Managed rule groups, rate limiting, IP allowlisting, geo-blocking, logging | Hands-on | Highly Available Web Platform |
| Secrets management | Secure credential storage and automatic rotation without hardcoded values | Secret rotation, cross-service access, versioning, IAM-based access control | Hands-on | All projects |
| Monitoring and logging | Operational visibility, anomaly detection, alerting, and capacity planning | Metrics, dashboards, alarms, log groups, retention policies, log insights | Hands-on | All projects |
| Audit trails | Tamper-resistant logging of all API activity for compliance and forensic investigation | Trail configuration, S3 log delivery, CloudWatch integration, log validation | Hands-on | Multi-Account Cloud Governance Foundation |
| Infrastructure as code | Reproducible, version-controlled, auditable infrastructure deployment | Module design, state management, variable abstraction, remote backends, CI/CD integration | Hands-on | All projects |
| Backup and recovery | Data protection and restore capabilities to meet RTO/RPO requirements | Backup policies, retention schedules, cross-region copies, restore testing | Working Knowledge | Highly Available Web Platform |
| Disaster recovery | Cross-region failover and business continuity for critical workloads | DR strategies (pilot light, warm standby, active-active), RTO/RPO targets, failover testing | Working Knowledge | Highly Available Web Platform |
| Multi-account governance | Centralized policy enforcement, security boundaries, and billing across accounts | Organizational unit structure, service control policies, centralized logging, budget controls | Hands-on | Multi-Account Cloud Governance Foundation |
| Cost management | Visibility and control over cloud spend to eliminate waste and rightsize resources | Tagging strategy, cost allocation, budget alerts, savings plans, rightsizing recommendations | Working Knowledge | All projects |