aws://xbrain/tf4-phase3shipped
TF4 Phase 3: E-commerce Microservices on EKS
Audit and reliability work on an e-commerce microservices platform running on EKS, in a team of about 50 people.
- log cost audit
- root cause
- fix merged
- incident report
- remediation plan
- Cost. Analyzed high CloudWatch logging costs and found 92.8% of logs came from one Argo CD–Kyverno misconfiguration; the team merged the fix the next day.
- Incident. Investigated a critical incident (orders stopped processing) with Grafana, logs and CloudTrail, and identified Kafka overload as the root cause.
- Audit. Wrote an incident report on lost Prometheus monitoring data, audited 26 security and operations issues into a remediation plan, and fixed IAM permissions in Terraform.
- EKS
- Argo CD
- Kyverno
- CloudWatch
- Prometheus
- Grafana
- CloudTrail
- Terraform
- IAM
aws://xbrain/cdo-07shipped
Foresight Lens: Resource Exhaustion Forecasting
The delivery pipeline for a platform that forecasts resource exhaustion, from commit to a safe production rollout.
- commit
- build · test
- security scan
- terraform
- staging
- blue/green prod
- Pipeline. Built 7 GitHub Actions CI/CD workflows automating build, test, Terraform infrastructure deployment and service rollout to ECS.
- Security. Keyless AWS access via GitHub OIDC; security scans (Gitleaks, Trivy, Checkov) on every pull request; nightly detection of infrastructure changed outside Terraform.
- Release. Blue/green deployments with AWS CodeDeploy and automatic rollback on rising error rate or latency; production accepts only images proven in staging.
- GitHub Actions
- GitHub OIDC
- Terraform
- ECS
- AWS CodeDeploy
- Gitleaks
- Trivy
- Checkov
aws://xbrain/budgetbotshipped
BudgetBot: AI Expense Categorizer
Users upload bank statements and AI categorizes transactions, sending uncertain ones to a review queue for confirmation.
- CloudFront
- API Gateway
- Lambda
- Bedrock
- DynamoDB
- Serverless. Designed and deployed the full serverless infrastructure in CloudFormation (CloudFront, API Gateway, Lambda, DynamoDB) on a custom domain, with Amazon Bedrock doing the categorizing.
- Cost. Used VPC endpoints instead of a NAT Gateway to cut cost; monitored with CloudWatch and capped spend with AWS Budgets.
- CloudFormation
- CloudFront
- API Gateway
- Lambda
- DynamoDB
- Bedrock
- VPC endpoints
- CloudWatch
- AWS Budgets
aws://sportfieldsshipped
SportFields: Field Booking Platform
A sports field booking platform moved to a 3-tier AWS architecture with Terraform.
- CloudFront · WAF
- ALB
- EC2 Auto Scaling
- RDS PostgreSQL
- Infrastructure. Used Terraform (8 reusable modules) to move a React, Node.js and PostgreSQL app to a 3-tier AWS architecture: load balancer, auto-scaling EC2, RDS PostgreSQL, CloudFront + AWS WAF, and Lambda image processing.
- Controls. Automated cost and security controls: stopping servers over budget and removing public SSH access; enabled CloudTrail, AWS Config, Security Hub and AWS Backup.
- Terraform
- ALB
- EC2 Auto Scaling
- RDS PostgreSQL
- CloudFront
- AWS WAF
- Lambda
- CloudTrail
- AWS Config
- Security Hub
- AWS Backup
gymsmart://graduationgraduated
GymSmart: Gym Management Software
Graduation project, built with a team of 5.
- memberships
- payments
- e-contracts
- SonarCloud gate
- Payments. Owned payments (PayOS, SePay, QR bank transfer, wallets) and online e-contracts (SignNow).
- Quality. Built memberships, Zalo login and role-based dashboards; wrote 67 test files to meet the SonarCloud quality gate.
- PayOS
- SePay
- SignNow
- Zalo login
- SonarCloud
