AWS / CLOUD SECURITY — CASE STUDY

AWS / CLOUD SECURITY — CASE STUDY

05

AWS SECURE BUSINESS INFRASTRUCTURE

AWS SECURE BUSINESS INFRASTRUCTURE

AWS SECURE BUSINESS INFRASTRUCTURE

AWS / CLOUD SECURITY — CASE STUDY

Secure AWS infrastructure exploring IAM, least privilege, network architecture, logging, monitoring, storage, and cloud security controls.

Secure AWS infrastructure exploring IAM, least privilege, network architecture, logging, monitoring, storage, and cloud security controls.

CHALLENGE & OPPORTUNITY

CHALLENGE & OPPORTUNITY

CHALLENGE & OPPORTUNITY

A technical case study documenting secure AWS delivery and network-access controls, with attention to deployment identity, private infrastructure, and validated connectivity.

SYSTEMS & OPERATIONS

SYSTEMS & OPERATIONS

SYSTEMS & OPERATIONS

GitHub Actions uses OIDC with an IAM deployment role for the deployment workflow. The work connects automated deployment with scoped AWS access.

AWS & CLOUD ARCHITECTURE

AWS & CLOUD ARCHITECTURE

AWS & CLOUD ARCHITECTURE

The implementation includes S3 with a private origin, CloudFront, and HTTPS. A VPC with public and private subnets and a private EC2 instance forms the network portion of the work.

CYBERSECURITY & SECURITY CONTROLS

CYBERSECURITY & SECURITY CONTROLS

CYBERSECURITY & SECURITY CONTROLS

The work includes IAM least privilege and MFA, alongside security-group controls. Reachability Analyzer validation confirmed TCP 8080 was permitted and SSH on TCP 22 was blocked for the tested network path.

PROJECT SUMMARY

PROJECT SUMMARY

PROJECT SUMMARY

This case study documents S3 and CloudFront delivery, GitHub Actions with OIDC and an IAM deployment role, and private-network access controls validated with Reachability Analyzer.

BACK TO WORK

NEXT PROJECT