This site, actually
Static site on S3, served securely — domain, DNS, TLS, and origin access all wired up by hand, on purpose.
Enterprise networking lab
A hands-on AWS networking lab covering VPC design, Peering, Site-to-Site VPN, Client VPN, Transit Gateway (including selective route-table isolation), and PrivateLink — plus monitoring and a least-privilege IAM pass, with the real troubleshooting (an account-level ELB restriction, a Console cert bug, a Console reachability false positive) documented rather than hidden.
Cloud-native eCommerce platform ★ flagship
Full-stack storefront on four ECS Fargate microservices, Cognito auth, and a real checkout-to-SNS-confirmation-email flow — deployed and verified end-to-end, then CI/CD proven live with a least-privilege OIDC deploy role. 13 real incidents diagnosed and fixed, documented in the repo rather than hidden.
Three-tier enterprise web app
Classic public/private subnet architecture — load-balanced, auto-scaled, with a database tier that's never directly exposed.
Serverless application
An event-driven app with no servers to patch or scale — just functions, a managed API, and a database that scales with them.
Cloud migration case study
A written case study on migrating a traditional application to AWS — current vs. target architecture, migration plan, security, cost, and rollback strategy.