Secure AWS Portfolio Website
This project demonstrates a secure and scalable cloud architecture built using AWS services. The objective was to design a production-style solution that reflects best practices in cloud deployment, security, and content delivery.
Architecture
End-to-end architecture showing secure content delivery using CloudFront, ACM, and private S3.
- Amazon S3 used as a private storage layer for static website content
- Amazon CloudFront used as a global content delivery network (CDN)
- AWS Certificate Manager for HTTPS encryption
- IAM-based access control to restrict direct access to S3
Architecture Overview
This solution uses a secure, production-style architecture:
- User requests are routed through Amazon CloudFront (CDN)
- CloudFront delivers content securely over HTTPS using AWS Certificate Manager
- Content is stored in a private Amazon S3 bucket
- Access to S3 is restricted using Origin Access Control
Security Design
The S3 bucket is configured as private, with access restricted through CloudFront using secure origin access control. This ensures that content is not publicly exposed and is delivered only through the CDN.
Key Features
- Secure content delivery over HTTPS
- Global performance optimisation through CDN
- Cache control and invalidation for content updates
- Separation of storage and delivery layers
Outcome
Project 2: Secure AWS IAM & Monitoring Lab
This project focused on implementing secure identity and access management in AWS using best practices such as least privilege, role-based access control, and monitoring.
Objective
To design and validate a secure IAM structure that limits access based on user roles while ensuring visibility into system activity.
Services Used
- AWS IAM (Users, Groups, Policies)
- Amazon S3
- AWS CloudTrail
- Multi-Factor Authentication (MFA)
Security Implementation
- Created role-based groups: Admin, ReadOnly, and Limited Access
- Implemented least-privilege access using a custom S3 policy
- Restricted users to specific resources instead of full account access
- Enabled MFA for secure authentication
Validation & Testing
- Tested access using separate user accounts
- Verified read-only users could not modify resources
- Confirmed limited users could only access the designated S3 bucket
Monitoring & Visibility
Used AWS CloudTrail to track user activity, including logins and resource access, ensuring visibility into actions performed within the environment.
Outcome
This project demonstrates how secure access control and monitoring can reduce risk, prevent unauthorized access, and improve overall cloud security posture in real-world environments.
Successfully demonstrated secure access control, identity management, and monitoring within AWS. This project reflects real-world cloud security practices and governance principles.
This project demonstrates my ability to design and deploy cloud-based solutions with a focus on security, scalability, and operational reliability. It reflects real-world architecture patterns used in production environments.
Key Skills Demonstrated
- Identity & Access Management (IAM)
- Least Privilege Security Design
- Role-Based Access Control (RBAC)
- AWS Security Best Practices
- Cloud Monitoring & Auditing (CloudTrail)