A clean content hub for AWS patterns, GenAI production notes, architecture diagrams, and failure-mode thinking.
A CDK TypeScript stack that routes S3 events through EventBridge properly: VPC placement, KMS, Secrets Manager, the cost model, and the failure modes most setups skip.
CodePipeline, CodeDeploy, and Auto Scaling in CDK: VPC, ALB, ASG, SSM config, and the lifecycle hook settings that keep deploys clean under real load.
The full web-app stack most tutorials skip: VPC isolation, Fargate on private subnets, Aurora with KMS, CloudFront, secret rotation, and the six operational gaps that page you at 2am.
A production CDK stack enforcing KMS encryption, least-privilege IAM, VPC endpoint routing for secrets, WAFv2 on CloudFront and API Gateway, and Security Hub, all versioned and testable.
Coordinating DataSync, DMS, Glue, and OpenSearch under one Step Functions control plane, and exactly where incomplete data sneaks through if you skip the readiness checks.
Five root causes I see across every cost engagement, ranked by how often they show up, plus what fixes actually work and in what order.
Real shortlist criteria from CTO conversations. The five questions that separate production architects from cert-only contractors.
Solo senior architect vs AWS consultancy vs full-time hire: side-by-side on speed, cost, scope, bus factor, and when each is the right call.