Client → API Gateway → Lambda → DynamoDB
API access controls with native AWS services
Designed a deployable access-control system using API Gateway usage plans for tier-specific throttles and quotas. A Lambda management API handles key and plan lifecycles, while DynamoDB stores metadata without retaining raw credentials.
- Isolated administrative operations from protected workloads
- Made propagation delays and non-transactional boundaries explicit
Read the case study·View repository
HTTP API → Lambda → SQS → SNS → Consumers
Resilient asynchronous fan-out
Engineered an event pipeline that buffers HTTP requests in SQS, processes them asynchronously with Lambda, and distributes results to independent notification and audit consumers through SNS.
- Decoupled request handling through durable queueing
- Retried only failed batch items and routed exhausted messages to a dead-letter queue
Read the case study·View repository
Internet → ALB → Private subnets → ECS
Private ECS services with explicit capacity trade-offs
Built comparable Fargate and EC2-backed ECS services behind an Application Load Balancer, keeping application workloads in private subnets while making the capacity-ownership trade-offs directly comparable.
- Kept tasks and container instances off the public internet
- Separated networking, capacity, image, and service concerns
Read the case study·View Fargate repository
Languages and frameworks
PythonTypeScript / JavaScriptAPI design
FastAPI, Flask, Pydantic, AWS Lambda Powertools · NestJS, Fastify · REST, GraphQL, Server-Sent Events
AWS compute and APIs
ServerlessContainersComputeContent delivery
Lambda, API Gateway, AppSync, Cognito · ECS, Fargate, App Runner, ECR, Application Load Balancer · EC2, Auto Scaling, Lambda Function URLs · S3, CloudFront
Data and event systems
DatabasesMessagingOrchestrationData modeling
DynamoDB, PostgreSQL, RDS, Redis, MongoDB, ArangoDB · SQS, SNS, EventBridge, DynamoDB Streams · Step Functions, event-driven consumers, asynchronous fan-out · DynamoDB single-table patterns, SQL and NoSQL access patterns
Networking, identity, and security
NetworkingIdentityAPI controlsSecurity practice
VPC, public and private subnets, NAT, security groups, private DNS · IAM, Cognito, OAuth, SAML, OIDC roles · Usage plans, rate limits, API keys, field-level authorization · Least-privilege permissions, private workloads, secure artifact delivery
Production GenAI
FrameworksRetrievalDeliverySystem concerns
LangChain, LangGraph, LlamaIndex · RAG, vector retrieval, document ingestion, context selection · Model-provider integration, response streaming, tool calling · Secure document access, token usage, API boundaries, operational cost
Infrastructure and reliability
Infrastructure as codeDeliveryReliabilitySupporting cloud
CloudFormation, Serverless Framework · Docker, ECR, CI/CD pipelines, staged deployments · Dead-letter queues, partial batch failures, retries, idempotent consumers · GCP App Engine, Cloud Run, Firebase, Firestore, Pub/Sub