stefantimpau.com
// projects

Six builds, one direction.

Each project targets a different piece of what Cloud Support, Operations, and DevOps roles actually need — static hosting, networking, serverless, three-tier architecture, migration planning, and a full-stack build tying it together. Built, not just tutorial-followed.

arn:project/portfolio-website

This site, actually

Static site on S3, served securely — domain, DNS, TLS, and origin access all wired up by hand, on purpose.

S3CloudFrontRoute 53ACM
arn:project/aws-enterprise-network

Enterprise networking lab

A hands-on AWS networking lab covering VPC design, Peering, Site-to-Site VPN, Client VPN, Transit Gateway (including selective route-table isolation), and PrivateLink — plus monitoring and a least-privilege IAM pass, with the real troubleshooting (an account-level ELB restriction, a Console cert bug, a Console reachability false positive) documented rather than hidden.

VPCTransit GatewayClient VPNPrivateLinkSecurity GroupsDone
arn:project/aws-ecommerce-platform

Cloud-native eCommerce platform ★ flagship

Full-stack storefront on four ECS Fargate microservices, Cognito auth, and a real checkout-to-SNS-confirmation-email flow — deployed and verified end-to-end, then CI/CD proven live with a least-privilege OIDC deploy role. 13 real incidents diagnosed and fixed, documented in the repo rather than hidden.

ReactNode.jsECS/FargateDynamoDBRDSCognitoTerraformGitHub ActionsDone
arn:project/aws-three-tier-app

Three-tier enterprise web app

Classic public/private subnet architecture — load-balanced, auto-scaled, with a database tier that's never directly exposed.

VPCEC2ALBAuto ScalingRDSPlanned
arn:project/aws-serverless-app

Serverless application

An event-driven app with no servers to patch or scale — just functions, a managed API, and a database that scales with them.

LambdaAPI GatewayDynamoDBIAMCloudWatchPlanned
arn:project/aws-cloud-migration

Cloud migration case study

A written case study on migrating a traditional application to AWS — current vs. target architecture, migration plan, security, cost, and rollback strategy.

Case studyPlanned
Next pass on all six: Terraform for infrastructure as code, GitHub Actions for CI/CD, CloudWatch/SNS monitoring, and full documentation with architecture diagrams — once each project's core build is done.