Projects

Cloud Security Portfolio Site

Goal: Create a public portfolio that demonstrates secure cloud hosting practices while remaining low-cost and maintainable.

Approach:

• Private S3 bucket as the origin (no public website endpoint)
• CloudFront distribution with Origin Access Control (OAC) for HTTPS and controlled access
• Infrastructure defined and managed with Terraform
• GitLab CI/CD pipeline using OIDC for keyless authentication to AWS
• Automated content sync and CloudFront invalidation on push to main

Outcome: A multi-page static site served over HTTPS from a private origin, with infrastructure-as-code and automated deployments.

View site updates and changelog →

Offensive Security Lab Practice

Ongoing hands-on practice with modern attack paths, web application security, and network exploitation. Top 25% global ranking on TryHackMe. Tools include Nmap, Burp Suite, Metasploit, and privilege-escalation frameworks.