Open-source · MIT licensed
The complete code for every project on this site: 15 real-world AWS engineering builds, each deployable with AWS CloudFormation or the AWS CDK (TypeScript), and each validated against the CloudFormation schema.
Projects
| # | Project | Format | Code |
|---|---|---|---|
| Architectural Projects | |||
| 04 | Multi-Region Active-Active on AWS with Sub-Minute Failover Two regions, both serving reads and writes, with DNS failover in under a minute when one goes dark. | CDK (TypeScript) | Browse · .zip |
| 09 | A Secure Data Lake with Row- and Column-Level Security One table, two analysts, two different answers, with PII hidden by policy instead of by copying data. | CDK (TypeScript) | Browse · .zip |
| 10 | Legacy App Migration Playbook: On-Prem VM to Containers on AWS A repeatable, zero-downtime method: replicate the database with DMS, containerize the app with App2Container, cut over on your schedule. | CloudFormation | Browse · .zip |
| Engineering Projects | |||
| 07 | An Internal Developer Platform with Golden Paths on AWS Developers click one button and get a production-ready service with security, logging, alarms and scaling already built in. | CDK (TypeScript) | Browse · .zip |
| 08 | A GenAI Incident Co-Pilot with Amazon Bedrock and Claude When an alarm fires, an AI first responder gathers the evidence and posts a root-cause brief to Slack before anyone opens a laptop. | CDK (TypeScript) | Browse · .zip |
| 12 | A Multi-Cloud Observability Hub for AWS, Azure and GCP One pane of glass for three clouds, built on OpenTelemetry, with no AWS keys stored on Azure or GCP. | CDK (TypeScript) | Browse · .zip |
| Cloud Cost Optimization | |||
| 05 | FinOps Automation: An AWS Cost Anomaly Hunter That Pays for Itself Detect spikes with ML, find waste every week, estimate the savings in dollars, and optionally fix it automatically. | CDK (TypeScript) | Browse · .zip |
| 14 | Disaster Recovery for ~$5 a Month, with Automated Restore Drills A pilot-light DR setup that tests itself every month and emails you the measured RTO and RPO. | CDK (TypeScript) | Browse · .zip |
| 15 | A Policy-as-Code PR Bot for Terraform: Security, Rules and Cost in Every Review Every Terraform pull request gets security findings, organization-policy violations and the monthly cost change before merge. | CloudFormation | Browse · .zip |
| Cloud Security | |||
| 01 | Building a Self-Healing Multi-Account AWS Landing Zone Guardrails that fix themselves: an open security group gets closed within a minute or two, with an email explaining what happened. | CDK (TypeScript) | Browse · .zip |
| 02 | Compliance-as-Code for NIST 800-53 with Audit-Ready Evidence Map NIST SP 800-53 Rev. 5 controls to code and hand auditors fresh evidence every morning. | CloudFormation | Browse · .zip |
| 06 | Zero-Trust Access on AWS: No Bastions, No SSH Keys, No VPN Remove the attack surface entirely: no open ports, no internet path, and every session tied to a real identity and recorded. | CloudFormation | Browse · .zip |
| 11 | A Supply-Chain-Secure CI/CD Pipeline: SBOM, Scanning and Signing Every image is inventoried, vulnerability-gated, cryptographically signed and verified before it can run. | CDK (TypeScript) | Browse · .zip |
| Home Lab | |||
| 03 | Running Safe Chaos Engineering Game Days with AWS FIS Break things on purpose, safely, and measure exactly how fast you recover. | CDK (TypeScript) | Browse · .zip |
| 13 | An Edge IoT Telemetry Pipeline with AWS IoT Core A connected-fleet backend with a hot path that reacts in seconds and a cold path with cheap, queryable history. | CDK (TypeScript) | Browse · .zip |
Repository layout
aws-engineer-projects/
├── README.md
├── LICENSE MIT
├── package.json tooling for local validation
├── scripts/
│ ├── validate.mjs tsc + cdk synth / CloudFormation schema checks for every project
│ └── cfn-check.ts
└── projects/
├── 01-self-healing-landing-zone/
├── 02-compliance-as-code-nist/
├── 03-chaos-engineering-game-day/
├── 04-multi-region-active-active/
├── 05-finops-cost-anomaly-hunter/
├── 06-zero-trust-access/
├── 07-internal-developer-platform/
├── 08-genai-incident-copilot/
├── 09-secure-data-lake/
├── 10-legacy-migration-playbook/
├── 11-secure-supply-chain-cicd/
├── 12-multi-cloud-observability-hub/
├── 13-iot-telemetry-pipeline/
├── 14-low-cost-disaster-recovery/
├── 15-policy-as-code-pr-bot/Quick start
# CDK projects
cd projects/<project>
npm install
npx cdk bootstrap # once per account/region
npx cdk deploy
# CloudFormation projects
aws cloudformation deploy --stack-name <name> --template-file template.yaml --capabilities CAPABILITY_NAMED_IAM
# Validate everything locally - no AWS account needed
npm install && npm run validateSafety notes
- Deploy into a sandbox account first. Several projects change account-wide settings (AWS Config, Lake Formation admins, Security Hub, SCPs).
- Always run
cdk destroy/delete-stackwhen finished to avoid charges. - Cost estimates are approximate us-east-1 list prices at the time of writing.