IAM (Identity and Access Management) is the backbone of AWS security. Every API call, every resource access, every cross-account interaction is gated by IAM. Yet it remains one of the most misunderstood services in the AWS ecosystem. Misconfigured IAM policies…
As a Cloud Engineer, the AWS Console is great for exploration, but the AWS Command Line Interface (CLI) is where true automation and speed live. Whether you are auditing security groups, cleaning up unused resources, or managing complex identity profiles,…
Project Overview ☁️ This project builds a serverless data pipeline on AWS to ingest, clean, transform, and visualize CSV files. When a CSV file is uploaded to the raw data bucket csv-raw-data, an AWS Lambda function is invoked to perform…
This project is a simple way to manage events that is built entirely on serverless architecture. People can sign up for an email list, see upcoming events, and admins can add new events using a simple form (password: 12345). The…
I wrote this small Bash script that takes raw logs and generates a clean sorted report of who is hammering your SSH port and how often. This is the kind of small operational tool every Cloud or DevOps engineer should…
When evaluating the real performance of a server deployment on Hetzner VPS, intuition is not enough. You need data. You need to simulate real traffic patterns and understand how your infrastructure behaves under pressure. For this reason, I used Locust…
In this project, we’re building a small face-analysis tool using Amazon Rekognition. The workflow is simple. You upload an image to an S3 bucket, the script reads the file name, sends it to Rekognition through boto3, and retrieves the details…
We will show you how to turn the 5 microservices demo into a production-ready setup. You will learn the role of each service, frontend, queue, worker, database, and results. You will deploy and harden the system on a multi-node Docker…
Introduction You’ve worked hard on your React app, and now it’s time to put it in a Docker container. You run docker init, build your image, and then push it to a registry. But then you see something that worries…
This project provides a complete guide to setting up a secure and scalable web application infrastructure on Hetzner Cloud. It explains how to configure a private network, a bastion host that functions as both a NAT gateway and a jump…