A portfolio of Cloud Architecture, Platform Engineering, Security, Automation, Disaster Recovery, and Generative AI Projects.
This repository showcases enterprise-grade cloud engineering work spanning multi-cloud environments, security architecture, infrastructure automation, and AI/ML workloads. Each project emphasizes architecture decisions, operational excellence, and industry best practices.
| Category | Description | Cloud |
|---|---|---|
| AWS Landing Zone | Enterprise multi-account governance and platform engineering | AWS |
| Disaster Recovery | Cross-region architectures, backup strategies, business continuity | AWS |
| Cloud Migrations | Redis, RDS, and workload migration patterns | AWS |
| Security Engineering | IAM, KMS, GuardDuty, Security Hub, CloudTrail | AWS |
| Networking | Transit Gateway, hybrid connectivity, multi-account networking | AWS |
| Automation | Lambda, Boto3, Systems Manager, event-driven architectures | AWS |
| Serverless | Event-driven, API-first serverless applications | AWS |
| AI Workloads | Generative AI, RAG, Bedrock, document processing | AWS |
| Terraform | Multi-cloud Infrastructure as Code | Multi |
| Architecture Patterns | Reusable patterns for HA, DR, security, networking | Multi |
Cloud-Engineering-Projects/
├── aws/ # Amazon Web Services projects
│ ├── landing-zone/ # Enterprise AWS Landing Zone
│ ├── disaster-recovery/ # DR architectures and implementations
│ ├── migrations/ # Cloud migration projects
│ ├── networking/ # Network architecture projects
│ ├── security/ # Security engineering projects
│ ├── automation/ # Automation and orchestration
│ ├── serverless/ # Serverless architectures
│ ├── ai-workloads/ # Generative AI and ML projects
│ └── cost-optimization/ # FinOps and cost management
├── azure/ # Microsoft Azure projects
├── gcp/ # Google Cloud Platform projects
├── terraform/ # Multi-cloud IaC modules
├── architecture-patterns/ # Reusable architecture patterns
├── diagrams/ # Architecture diagrams (source files)
└── assets/ # Images, GIFs, media
Enterprise multi-account AWS environment with full governance, security baseline, and networking.
| Component | Status | Description |
|---|---|---|
| AWS Organizations | ✅ Complete | OU hierarchy, SCPs, account vending |
| Security Baseline | ✅ Complete | GuardDuty, SecurityHub, Config, CloudTrail |
| Centralized Logging | ✅ Complete | Immutable log archive with S3 Object Lock |
| Network Architecture | ✅ Complete | Transit Gateway hub-and-spoke with segmentation |
| IAM Identity Center | ✅ Complete | SSO with permission sets and RBAC |
➡️ View Full Landing Zone Project
Cross-region architectures ensuring business continuity and data durability.
| Project | Pattern | RPO | RTO |
|---|---|---|---|
| Active-Passive DR | Pilot Light / Warm Standby | Minutes | < 30 min |
| Active-Active Multi-Region | Active-Active | Zero | Zero |
| Cross-Region Backup | Backup & Restore | Hours | Hours |
Large-scale migration projects following AWS Migration Acceleration Program methodologies.
| Project | Type | Scale |
|---|---|---|
| Redis Cross-Region Migration | Database Migration | Multi-TB |
| RDS Migration | Database Migration | Enterprise |
| Workload Migration | Application Migration | Multi-Account |
Defense-in-depth security implementations across the cloud estate.
| Project | Focus Area |
|---|---|
| IAM Architecture | Least privilege, role design, cross-account access |
| KMS Strategy | Encryption key management, key policies, rotation |
| GuardDuty | Threat detection, automated response |
| Security Hub | CSPM, compliance frameworks, finding aggregation |
| CloudTrail | Audit logging, organization trails, integrity |
Enterprise network architectures for multi-account, hybrid, and multi-region environments.
| Project | Scope |
|---|---|
| Transit Gateway | Hub-and-spoke with segmentation |
| Hybrid Connectivity | VPN, Direct Connect, SD-WAN integration |
| Multi-Account Networking | RAM, shared VPCs, IPAM |
Infrastructure automation, event-driven workflows, and operational tooling.
| Project | Technology |
|---|---|
| Lambda Functions | Serverless automation |
| Boto3 Scripts | Python SDK automation |
| Systems Manager | Fleet management, patching, runbooks |
Generative AI applications, RAG architectures, and ML platforms on AWS.
| Project | Focus |
|---|---|
| Generative AI Training Platform | Learning platform with AI content |
| RAG Architecture | Document retrieval with LLM inference |
| AI Chatbot | Conversational AI with guardrails |
| Bedrock Integration | Foundation models, prompt engineering |
| Knowledge Base Search | Vector search with embeddings |
| Document Processing | PDF → Textract → Embeddings pipeline |
| LLM Application Hosting | Model serving at scale |
Multi-cloud Infrastructure as Code with reusable modules and patterns.
| Cloud | Modules |
|---|---|
| AWS Modules | VPC, EKS, RDS, Lambda, Landing Zone |
| Azure Modules | VNet, AKS, SQL, Functions |
| GCP Modules | VPC, GKE, Cloud SQL, Cloud Functions |
Reusable, documented architecture patterns with decision matrices.
| Pattern | Category |
|---|---|
| High Availability | Resilience |
| Disaster Recovery | Business Continuity |
| Security | Zero Trust, Defense in Depth |
| Networking | Hub-Spoke, Mesh, Hybrid |
| Landing Zones | Multi-Account Governance |
| Observability | Monitoring, Logging, Tracing |
| Cost Optimization | FinOps Patterns |
- LinkedIn: linkedin.com/in/rajib13
- Interactive AI Learning Site: ai.neuralrhythms.in
- Personal Blog: neuralrhythms.in
This portfolio is continuously updated with new projects and improvements.