How I work with it
AWS is where I spend most of my working hours — designing architectures, auditing costs, reviewing IAM policies and being on the other end of incident calls. I default to the Well-Architected pillars: least privilege everywhere, multi-AZ by default, and everything reproducible from code.
Day to day I live in EC2, ECS and EKS, VPC networking, S3, RDS/Aurora, CloudFront and CloudWatch. My standing rule: if it can be clicked in the console, it should be defined in Terraform instead.
Knowledge areas
- VPC design — subnets, route tables, peering, Transit Gateway, private endpoints
- IAM deep cuts — policies, roles, permission boundaries, SCP guardrails
- Compute patterns across EC2, ECS Fargate and EKS
- Cost engineering — rightsizing, spot fleets, savings plans, tagging enforcement
- Multi-region resilience with Route53 failover and Aurora Global Database
knowledge shown honestly — no percentages, no infographics.
want the deep-dive version? ask me