Pipeline Security | Infrastructure Automation | DevSecOps
Securing and
cloud infrastructure
I build and automate infrastructure systems end-to-end — Terraform provisioning, CI/CD pipelines, monitoring, and incident response. This site is a working example: a highly available AWS architecture with security integrated into the pipeline and full observability. I'm most interested in work where infrastructure directly enables the mission.
Live Infrastructure Metrics
Total Git Commits
Security Score
Live IaC Resources
CI/CD Runs
Project Spotlight
From code push to production
Built and deployed via GitHub Actions
Serverless DevSecOps Platform: CI/CD Pipeline with GRC Compliance
I built this to demonstrate end-to-end platform ownership: design, provision, deploy, and observe. Terraform defines a fully serverless architecture — CloudFront (with an edge Function for routing) in front of a private S3 bucket and API Gateway; GitHub Actions runs Terraform apply and deploys the Lambda function behind it. No VPC, no servers to patch. The repo includes GRC compliance mapping and CloudWatch logging.
- ✓ Terraform IaC: S3, CloudFront (Origin Access Control + edge Function), Lambda, API Gateway, ACM, and Route 53 — fully serverless, no VPC or servers to patch.
- ✓ Security Scanning: Snyk dependency scanning integrated into the deployment pipeline, blocking on high-severity findings.
- ✓ GRC Dashboard: Interactive compliance mapping to NIST, CIS, and HIPAA frameworks with real-time scoring.
- ✓ Dynamic API: Real-time GitHub statistics via a Lambda function behind API Gateway, with resilience checks and no persistent state.
- ✓ SSL: ACM on CloudFront with automatic renewal; Route 53 DNS validation. No servers, no on-instance cert management.
- ✓ GitHub Actions: Orchestrates the entire build/deploy cycle from a single `git push`.
- ✓ CloudWatch Monitoring: Lambda execution logs and metrics captured automatically — no agent to install or maintain.