Projects

A static storefront — product search, cart, checkout UI — served from a private S3 bucket behind CloudFront. HTTPS runs on a free ACM certificate, DNS is on Route 53 with a custom domain, and a CloudWatch dashboard tracks CloudFront and S3 request metrics. A GitHub Actions pipeline deploys on every push to main, authenticating to AWS via short-lived OIDC credentials instead of stored access keys.

A classic three-tier architecture — load-balanced, auto-scaling WordPress on EC2, a private MySQL RDS tier (with a read replica), and shared EFS storage for uploads — fronted by CloudFront and cached with ElastiCache Redis. Built one step at a time with CloudFormation, including a CI/CD pipeline that redeploys on every push via GitHub OIDC.