Static Site + Blog on AWS
- S3 private buckets (OAC)
- CloudFront CDN + HTTPS (ACM)
- Cloudflare DNS + redirects
- AWS Budgets + SNS alerts
- GitHub Actions CI/CD pipeline
- IAM least privilege (deploy user)
Real builds, documented. Each project links to the write-up and the source.
Gateway page linking to private services (future: authenticated access).
Build a lab VPC pattern (public ALB + private app subnets + VPC endpoints) and document it.
Build a contact form backed by API Gateway + Lambda + SES. No servers to manage — just cloud-native services wired together.
Set up observability for CloudFront — traffic, error rates, cache hit ratio. Monitoring is a core skill in any cloud ops role.