YC
04 / CLOUD INFRASTRUCTURE & DEVOPS

Cloud Architecture, Provisioning & Operations

Where application development meets infrastructure engineering. This dedicated space documents my hands-on cloud experiments: codifying AWS networks in Terraform, eliminating security vulnerabilities with zero-SSH deployments, configuring hosts with Ansible, and studying container orchestration.

HONEST TECHNICAL BOUNDARY: These projects represent deliberate personal cloud engineering labs and rigorous hands-on practice, not enterprise production environments. Every claim is substantiated by actual Terraform configs, shell scripts, and authentic recordings.
FEATURED INFRASTRUCTURE LAB · AWS, TERRAFORM & ANSIBLE

Multi-Tier Cloud Infrastructure on AWS

A complete end-to-end cloud engineering case study with 4 authentic recordings.

LIVE DEMO↗GITHUB↗CASE STUDY→
0:00 / 0:00
Near-Viewport Autoplay

Implemented Network Architecture: Custom VPC, public subnets (NAT Gateway), private subnets (Frontend Nginx & Backend Flask/Gunicorn), S3 Gateway Endpoint, and isolated Database tier.

CHAPTER 01

Terraform IaC

Declarative VPC, subnets, route tables, and security groups in modular Terraform.

CHAPTER 02

AWS Network Topology

Strict compute isolation: private subnets with NAT routing and isolated RDS PostgreSQL.

CHAPTER 03

Zero-SSH CI/CD

GitHub Actions pushing to ECR and rolling out updates via AWS Systems Manager.

CHAPTER 04

Ansible Playbooks

Automated server configuration, package upgrades, Docker runtimes, and Nginx proxy setups.

SUPPORTING INFRASTRUCTURE LABS

Focused Cloud Engineering Case Studies

Targeted engineering projects demonstrating serverless microservice execution and automated container delivery, complementing the Expense Tracker multi-tier cloud lab.

EVENT-DRIVEN ARCHITECTUREAWS ap-south-1

Serverless REST API — AWS Lambda

Amazon API Gateway · AWS Lambda · Amazon DynamoDB

Stateless task management microservice with Lambda proxy integration. Handles HTTP requests via API Gateway, executes business logic on AWS Lambda, and persists key-value documents in DynamoDB without server provisioning. Verified live with Hoppscotch request runs.

EXECUTION MODELStateless Event-Driven
STORAGE TIERDynamoDB (UUID Key)
AWS LambdaAPI GatewayDynamoDBServerlessPython / REST
Screen Recording EvidenceRead Case Study→
CONTINUOUS INTEGRATIONGitHub Actions → ECR

GitHub Actions → Docker → Amazon ECR

Automated Container Delivery · Terraform Registry

Automated container build and publishing pipeline. On Git push to main, workflow builds the Docker image, boots an ephemeral container to pass a health check, dual-tags with commit SHA and latest, and pushes to private Amazon ECR in ap-south-1.

CI TRIGGERPush to main / Dispatch
TAGGING STRATEGYGit SHA + latest
GitHub ActionsAmazon ECRDockerTerraformCI/CD
GitHub Repo↗Read Case Study→
ENGINEERING COMPETENCIES & NOTES

Core Technical Focus & Practical Practice

INFRASTRUCTURE AS CODEDual-AZ VPC

Terraform & AWS Network Topology

Codifying complete cloud networks in modular Terraform configurations. Custom VPCs with CIDR blocks (10.0.0.0/16), multi-AZ public and private subnet partitioning, least-privilege security groups, Internet Gateways, NAT Gateways, and S3 VPC Gateway Endpoints.

TerraformAWS VPCRoute TablesSecurity GroupsS3 Endpoints
Read Engineering Note→
DEPLOYMENT SECURITYZero Port 22

Zero-SSH CI/CD via AWS Systems Manager

Eliminating inbound SSH port 22 entirely from cloud infrastructure. Automated GitHub Actions pipelines build multi-stage Docker images, push to Amazon ECR, and execute remote updates on private EC2 instances through authenticated AWS Systems Manager (SSM) agent run commands.

GitHub ActionsAmazon ECRAWS SSMIAM RolesDocker
Read Engineering Note→
CONFIGURATION MANAGEMENTIdempotent Playbooks

Ansible Playbooks & Server Hardening

Automating server state post-provisioning to guarantee immutable, repeatable environments. Playbooks manage OS updates, Docker engine installation, user and permission boundaries, Nginx reverse proxy configurations, and environment variable placement.

AnsibleYAMLLinux / UbuntuNginx ConfigsDynamic Inventory
Read Engineering Note→
CONTAINERS & ORCHESTRATIONContainer Platforms

Docker, Compose & Kubernetes Experiments

Containerizing multi-service application architectures with Docker Compose. Exploring local Kubernetes clusters with Minikube and lightweight k3s to study pod scheduling, ingress controllers, persistent volume claims, and rolling update strategies.

DockerDocker ComposeMinikubek3sKubernetes Manifests
Read Engineering Note→
OBSERVABILITY & RELIABILITYSystem Visibility

Monitoring, Health Checks & Telemetry

Implementing application health check endpoints, Prometheus metric scraping endpoints, and system-level metrics collection. Exploring log aggregation and CloudWatch alarms for operational awareness before failures impact users.

PrometheusHealth ProbesCloudWatchNginx LogsLinux Systemd
Read Engineering Note→
HARDWARE & EDGEEdge Linux

IoT Edge Controller & MQTT Pub/Sub

Building offline-first appliance controllers using Raspberry Pi and optocoupled relay modules. Supervised Python daemons under Linux systemd synchronize hardware state over Mosquitto MQTT brokers with sub-50ms latency.

Raspberry PiMosquitto MQTTPython DaemonsystemdOptocouplers
Read Engineering Note→
← Previous Pillar: AI & IntentIQNext: Engineering Notes Journal→