Cloud infrastructure, automation and self-hosted systems built in AWS accounts and on my own hardware. The diagrams describe the deployed designs, not reference architectures.
Scans multiple AWS accounts for security, cost and inventory findings. Deterministic detectors create the findings; a read-only AI investigator explains them without changing resources.
Lambda · DynamoDB · Cognito · CloudFront · TerraformTerraform infrastructure for eight .NET services and two background workers on ECS. The design separates request traffic from S3 and SQS event processing and avoids a NAT gateway.
ECS on EC2 · RDS · OpenSearch · SQS · TerraformStreams PostgreSQL changes from the write-ahead log into Amazon MSK with Debezium on MSK Connect. An S3 gateway endpoint supplies the connector plugin without a NAT gateway.
RDS PostgreSQL · Amazon MSK · Debezium · TerraformRuns this site from private S3 behind CloudFront and counts visitors with Lambda and DynamoDB. Terraform and separate OIDC plan and apply workflows manage the stack.
CloudFront · S3 · Lambda · DynamoDB · Terraform · AstroDeploys the same containerized Python application to ECS Fargate and App Runner. Both pipelines use Terraform for infrastructure and OIDC instead of stored AWS credentials.
ECS Fargate · App Runner · Docker · TerraformThe project that preceded ClearSky. It scans AWS cost, inventory and security posture, tracks findings over time, and generates architecture diagrams from discovered resources.
Lambda · DynamoDB · CloudFront · Terraform · GitHub ActionsRuns an encrypted note-sync service on a headless Arch Linux server. CouchDB is deployed with Docker Compose and restricted with rules applied through Docker's iptables chains.
Arch Linux · Docker Compose · CouchDB · iptablesUses Python and Netmiko to back up network-device configurations in a GNS3 lab. Each backup is stored in Git so configuration changes can be reviewed over time.
Python · Netmiko · GNS3 · Git