Cloud Architecture Projects

Personal projects demonstrating resilient solution design, infrastructure automation, and Well-Architected best practices across compute, networking, security, data, and platform engineering.

For hiring managers: These are personal projects demonstrating architecture design, infrastructure as code, and cloud best practices. Each includes design reasoning and Well-Architected trade-off analysis. See also: Architecture Diagrams.
Multi-Account Governance Mar 2026 to Present
AWS Organizations Terraform Personal Project

Multi-Account AWS Landing Zone

Problem

No governance framework meant every team provisioned AWS resources differently, creating security gaps, inconsistent tagging, and no central visibility across accounts.

Solution

Deployed a four-OU AWS Organizations structure with 8 SCPs, centralized GuardDuty, org-wide CloudTrail, and Terraform-based account vending across 10+ accounts.

Key Decision SCPs over IAM boundary policies: SCPs cannot be overridden by account admins, making them the right control plane for non-negotiable org-wide guardrails like root access restriction and public S3 prevention.
AWS Organizations SCPs IAM Identity Center GuardDuty Security Hub AWS Config CloudTrail Transit Gateway Terraform
Multi-account governance Security design Infrastructure as Code Network segmentation
GitHub Architecture
High Availability / DR Feb 2025
AWS Multi-AZ Terraform Personal Project

Highly Available WordPress on AWS

Problem

A single-server WordPress deployment had no redundancy: one hardware failure caused complete site outages lasting hours with no automated recovery path.

Solution

Replaced with a 3-AZ Auto Scaling group behind an ALB, Multi-AZ RDS with automated failover, CloudFront CDN, and WAF, delivering RTO under 15 minutes.

Key Decision RDS Multi-AZ over read replicas for HA: synchronous standby replication gives sub-2-minute automatic failover without manual promotion steps during a primary instance failure.
EC2 Auto Scaling ALB RDS Multi-AZ CloudFront AWS WAF AWS KMS SSM Session Manager CloudWatch Terraform
HA architecture Multi-AZ design Security hardening Infrastructure as Code
GitHub Architecture
Containers / GitOps Jan 2026
AWS EKS GitOps Personal Project

EKS Online Boutique: 11 Microservices with GitOps

Problem

Deploying 11 microservices required consistent, repeatable delivery with runtime security scanning and automatic node scaling without over-provisioning capacity.

Solution

Deployed Online Boutique on EKS 1.28 with ArgoCD GitOps for declarative delivery, Karpenter for node autoscaling, and Trivy integrated into CI for CVE scanning.

Key Decision ArgoCD over Helm-only deployment: GitOps gives auditability, automatic drift reconciliation, and rollback from the repo rather than manual kubectl rollout undo commands.
Amazon EKS ArgoCD Karpenter Trivy Helm GitHub Actions (OIDC) Amazon ECR IAM IRSA
Kubernetes GitOps Container security CI/CD Node autoscaling
GitHub
Serverless / Event-Driven Jan 2026
AWS Lambda SQS FIFO Personal Project

Event-Driven Order Processing Pipeline

Problem

A synchronous order API blocked new orders during processing spikes, and any single failure could permanently drop orders with no retry mechanism.

Solution

Built a fully serverless order pipeline with SQS FIFO + Lambda + DynamoDB using two-layer idempotency, running at $2.32/month with zero idle infrastructure cost.

Key Decision SQS FIFO over SNS fanout for order intake: FIFO ordering guarantees and per-message-group deduplication prevent duplicate fulfillment when consumers retry after transient failures.
AWS Lambda Amazon API Gateway Amazon SQS FIFO Amazon SNS Amazon DynamoDB AWS X-Ray CloudWatch Terraform
Serverless architecture Event-driven design Idempotency patterns Cost optimization
GitHub
Polyglot Persistence Dec 2025
AWS DynamoDB Aurora Personal Project

NexaShop: E-Commerce Polyglot Persistence

Problem

A monolithic on-premises database couldn't serve mixed workloads: product catalog lookups, session data, and transactional orders each had conflicting access patterns and scale requirements.

Solution

Designed polyglot persistence with DynamoDB for catalog, Aurora for orders, and ElastiCache Redis for sessions, reducing infrastructure cost from $1,800/month on-prem to $297/month on AWS.

Key Decision Purpose-built databases over a single relational engine: mapping each data type to the storage engine that fits its access pattern eliminates performance trade-offs and enables independent scaling per service.
Amazon DynamoDB Amazon Aurora ElastiCache Redis Amazon SQS AWS Lambda API Gateway CloudFront Amazon S3
Database design Polyglot persistence Cost optimization Scalability
GitHub
Serverless REST API Nov 2025
AWS Lambda Cognito Personal Project

Serverless Task API: Full CRUD with JWT Auth

Problem

Building a full CRUD REST API with authentication and authorization required scalable compute and identity management without the overhead of managing servers.

Solution

Built a fully serverless REST API with Lambda + API Gateway + DynamoDB + Cognito JWT auth, supporting complete CRUD operations with zero server management overhead.

Key Decision Cognito JWT over API key auth: JWT provides per-user identity, configurable token expiry, and standard OIDC integration without storing credentials in the API layer.
AWS Lambda Amazon API Gateway Amazon DynamoDB Amazon Cognito CloudWatch IAM Terraform
REST API design Serverless Authentication / Authorization Infrastructure as Code
GitHub
SA Pre-Sales Simulation Oct 2025
AWS Elastic Beanstalk Pre-Sales Forage Simulation

AWS APAC SA Forage — Retail Migration Proposal

Problem

A retail client in APAC ran WordPress on a single shared hosting server: no redundancy, no backups, and 180ms page load times for Southeast Asian customers costing conversion rates.

Solution

Delivered a full SA pre-sales engagement including proposal, TCO analysis, and ADR recommending Elastic Beanstalk + RDS Multi-AZ + CloudFront matched to the client's operational maturity.

Key Decision Elastic Beanstalk over EKS: with one developer and no Kubernetes experience, EB's eb deploy workflow delivered the required HA at under $100/month without requiring DevOps hiring.
Elastic Beanstalk RDS Multi-AZ CloudFront Route 53 ACM CloudWatch Amazon S3
Pre-sales SA TCO analysis Architecture decision records Customer communication
GitHub