AWS: private networks, databases and observability
MY ROLEProject lead, cloud architect and infrastructure engineer
As project lead, cloud architect and infrastructure engineer, I built a multi-tier AWS environment with private database connectivity, controlled administration paths and central monitoring.
Systems Manager Session Manager enabled administration. CloudWatch supported logging and monitoring.
IAM and STS, security groups, network ACLs, NAT and VPC endpoints were examined for access paths and network boundaries. Cost control and a comparison with Aurora complemented the technical assessment.
Result: Built an AWS environment with private database connectivity, SSM administration and CloudWatch monitoring, and examined access paths.