Case study library
Project case studies from enterprise AWS delivery — each one written up with the context, constraint, approach, and trade-offs. Start with a project overview for the business context and architecture scope, then open the linked technical detail for the architecture depth. Client details are anonymized; the engineering is not.
31 case studies
Combining schema and client compatibility work, continuous replication, and local connection pooling to move a legacy telecom database tier to Aurora.
Aurora PostgreSQL · AWS DMS · PgBouncer · C client libraries · Terraform
Bringing recovery orchestration, service validation, and hardware-bound licensing into one failover workflow, with an explicit same-AZ boundary.
AWS Lambda · DynamoDB · CloudWatch · Systems Manager · EC2 · Elastic Network Interfaces
Adapting an existing local encryption service to AWS KMS while preserving its application integration and making the key-handling boundaries explicit.
AWS KMS · C · Linux shared memory · systemd · PostgreSQL
Turning manual host configuration and recurring migration defects into a provisioning workflow with explicit config, service reconciliation, and smoke tests.
Bash · AWS Systems Manager · systemd · Linux · Postfix
Tracing missing call records through consumer output and SSH transfer, then replacing process-only checks with data-flow monitoring.
Kafka · PostgreSQL · Linux · SSH ETL · CloudWatch
A four-layer landing zone, one hub-and-spoke network, and a CI/CD pipeline where an unintended apply is structurally impossible.
Terraform · AWS Organizations · Transit Gateway · GitHub Actions
Connecting shared services, workload accounts, security inspection, and a recovery region through one governed Transit Gateway, not a full mesh of VPC routes.
AWS Transit Gateway · AWS RAM · VPC · Terraform · AWS Network Firewall
Closing the two gaps that can make a replicated Aurora environment fail differently in recovery: secondary parameter-group drift and missing regional secrets.
Amazon Aurora Global Database · AWS Secrets Manager · AWS KMS · Terraform
A structured RCA pattern for an EKS ingress failure that separates DNS, load-balancer, routing, network-policy, and application causes, not just "5xx."
Amazon EKS · AWS Load Balancer Controller · Application Load Balancer · Route 53 · CloudWatch
Bootstrapping AWS OIDC roles once with SSO, then reusing one GitHub Actions engine for speculative plans and gated, single-environment Terraform deploys.
GitHub Actions · Terraform · AWS IAM OIDC · AWS STS · GitHub Environments
Centralizing CloudTrail events in a separately governed archive account, with encryption, a restrictive bucket policy, retention controls, and change alerting.
AWS CloudTrail · AWS Organizations · Amazon S3 · AWS KMS · S3 Object Lock · Amazon SNS
Separating Entra authentication from AD machine operations so Personal and Pool WorkSpaces get corporate sign-in without weakening the domain boundary.
Microsoft Entra ID · SAML 2.0 · AWS IAM · Amazon WorkSpaces · AD Connector · Terraform
A layered, authenticated path from Jira Service Management into a private service, using CloudFront and a Lambda authorizer because simpler options don't work.
API Gateway HTTP API · CloudFront · AWS WAF · Lambda authorizer · VPC Link · EKS · Secrets Manager
Separating public internet resolution from private VPC resolution, then associating one centrally managed hosted zone with shared and environment VPCs.
Amazon Route 53 · Route 53 Resolver · VPC · Transit Gateway · Terraform
Removing a load balancer and a Lambda proxy from the image path, leaving API Gateway talking to S3 directly through one shared private endpoint.
API Gateway · Amazon S3 · Route 53 · VPC endpoints · IAM · Terraform
Moving 225 GB of data across 1.48 million small objects between same-region S3 buckets, cutting transfer time from 8+ hours to 54 minutes using high-concurrency tooling on existing in-region compute.
Amazon S3 · AWS CLI · s5cmd · Amazon EC2 · AWS Data Pipeline · Bash
Decomposing an on-premise clinical monolith into containerized services, and taking reporting load off the live database with a decoupled analytics pipeline.
Amazon EKS · RDS · ElastiCache · CloudFront
A dedicated integration tier translating proprietary medical-IoT telemetry into standardized HL7 and JSON for clinical systems and a partner hospital network.
NextGen Mirth Connect · Nginx · MySQL · HL7 v2.5.1 · TLS 1.2+
Streaming physiological telemetry into a real-time OLAP store so care teams can query months of patient vitals without touching the operational database.
Apache NiFi · Apache Pinot · Tableau Server · mTLS
A network design where no compute or database resource has a public IP, engineering access is mutual-TLS VPN only, and the CDN is tuned for clinical apps.
AWS Client VPN · AWS CloudFront · AWS WAF · AWS KMS
A GitFlow-to-Kubernetes pipeline with per-branch promotion gates, headless registry authentication, and deployment lead time cut from hours to minutes.
Jenkins · Bitbucket · AWS ECR · Amazon EKS
An agentless VMware discovery, a third-party IdP-to-Identity Center SAML fix, and a Directional Business Case for an institutional financial platform.
AWS Transform · VMware vCenter · RVTools · AWS IAM Identity Center · Enterprise SAML IdP · AWS CAF
Inventory profiling and cloud transformation across US and EU data centers, sizing high-capacity media storage, compute, and localized workflows under AWS MAP.
AWS Application Discovery · AWS MAP · Excel Analytics · Multi-Region Profiling · TCO Modeling
An AWS MAP Assess evaluation for a European IT monitoring enterprise, transitioning VMware Tanzu Kubernetes to Amazon EKS with Karpenter and a TCO analysis.
Amazon EKS · VMware Tanzu · Karpenter · AWS Transform · RVTools · Dell VxRail · AWS MAP
Moving a connected-device platform from on-premise servers to AWS managed services: mapping each old service to its AWS replacement, cost estimates, and a MAP Mobilize roadmap.
AWS IoT Core · Amazon EKS · Amazon Kinesis · Aurora PostgreSQL · DynamoDB · AWS MAP
Getting an AdTech SaaS product listed and sold through a cloud marketplace: the buyer sign-up flow, usage-based billing, and checks after launch.
Google Cloud Marketplace · AWS · SaaS Integration · Webhooks · API Gateway · Cloud Functions
A 21+ node Oracle RAC cluster running active-active database failover on AWS, built around software-defined clustered storage to work around AWS's lack of native shared-SAN block storage.
Oracle RAC · FlashGrid · AWS EC2 · AWS EBS · AWS DMS · CentOS
A self-hosted distributed object storage layer unifying backups, ERP media, and mail archives across a public cloud, an on-prem data center, and a private OpenStack cloud behind one S3 API.
MinIO · Docker Compose · Nginx · Restic · AWS S3 Glacier · Python · Boto3
An automated EC2 failover system for a single-instance enterprise mail platform, cutting recovery time from 4+ hours of manual recovery to under 3 minutes, paired with tiered S3 backups and DNS-authenticated delivery.
Zimbra · AWS EC2 · AWS EBS · AWS S3 · Bash · SPF/DKIM/DMARC
A simple HR management tool I built with AI coding tools. It covers leave, attendance, shifts, timesheets, the org chart, company assets, and policy documents, and a built-in assistant handles everyday requests in plain language and answers policy questions by quoting the handbook, with the page.
FastAPI · Next.js · PostgreSQL
Taking a PDF product I built alone from a serverless deployment that didn't run to a self-audited, self-hosted app about 93% lighter, using AI coding tools under strict written rules.
Node.js · Docker Compose · Supabase (self-hosted) · Stripe · mupdf WASM · Terraform
Nothing matched that. Try a different term, or clear the filters.