Mid-Coast Maine • AWS • Terraform • Automation

AWS cloud architecture built with security, automation, and operational discipline.

I design and build AWS infrastructure with Terraform, emphasizing secure defaults, repeatable delivery, operational simplicity, and cost-aware architecture. This portfolio highlights the systems I've built and the architectural decisions behind them.

View Featured Projects Get in touch

Focus

AWS Architecture

Infrastructure

Terraform + GitHub Actions

Priorities

Security • Reliability • Cost

Portfolio Spotlight

Deployed

Multi-Service AWS Container Platform

A reusable ECS/Fargate platform for independently deployable application services with shared infrastructure and service-specific operational boundaries.

Private Fargate workloads with VPC endpoints
HTTPS host-based routing through a shared ALB
Per-service IAM, autoscaling, logging, and observability
Immutable ECR delivery with Git SHA provenance

ECS Fargate ECR Docker Terraform

Featured Architectures

Selected AWS projects that demonstrate infrastructure design, security, automation, resiliency, and production-focused engineering practices.

Containers Platform Engineering

Multi-Service AWS Container Platform

A reusable application platform running multiple independently deployable services on Amazon ECS with AWS Fargate, using shared infrastructure where appropriate and service-specific routing, IAM, scaling, and observability.

Architecture focus Private Fargate networking, HTTPS host-based routing, workload isolation, immutable container delivery, autoscaling, observability, and automated infrastructure deployment.

ECS Fargate ECR Docker ALB Terraform

View Project

Serverless Generative AI

AI-Powered Serverless Application

A cloud-native application integrating Amazon Bedrock with a serverless API and encrypted persistence layer, deployed entirely through Terraform.

Architecture focus Serverless design, generative AI integration, encryption, least-privilege access, and automated infrastructure delivery.

Bedrock Lambda API Gateway DynamoDB KMS Terraform

View Project

Infrastructure High Availability

Multi-AZ Three-Tier AWS Architecture

A multi-AZ AWS environment separating web, application, and database tiers with scalable compute, managed database services, and private administration paths.

Architecture focus Multi-AZ design, network segmentation, Auto Scaling, private connectivity, secrets management, and failure-aware architecture.

VPC ALB Auto Scaling RDS SSM Terraform

View Project

Web Delivery CI/CD

Secure Static Website Platform

A globally distributed static website using private Amazon S3 origins behind CloudFront Origin Access Control, with Route 53 DNS, ACM-managed TLS, and Terraform-managed development and production environments.

Architecture focus Private origins, HTTPS delivery, DNS, infrastructure automation, environment isolation, and controlled production deployments.

S3 CloudFront Route 53 ACM GitHub Actions Terraform

View Project

Event Driven Serverless

Serverless Image Processing Pipeline

An event-driven image processing workflow that automatically transforms uploaded objects using AWS Lambda and persists processed output in Amazon S3.

Architecture focus Event-driven processing, fault handling, dead-letter recovery, idempotency, and serverless operational patterns.

S3 Lambda SQS CloudWatch Pillow Terraform

View Project

Additional Projects

Additional repositories complement the featured architectures above and provide examples of supporting infrastructure and automation work.

Engineering approach

Infrastructure as Code: AWS environments are defined and managed with Terraform.
Security by design: architectures favor private resources, least-privilege access, encryption, and explicit trust boundaries.
Operational discipline: projects include deployment validation, teardown strategies, cost considerations, and documented architectural tradeoffs.

Portfolio Roadmap

The next phase of this portfolio focuses on deeper operational resilience and failure-aware engineering across AWS workloads.

Planned Reliability Engineering

Failure Testing & Recovery Patterns

A reliability engineering project focused on validating how AWS architectures behave during controlled failure scenarios, documenting recovery procedures, and measuring operational resilience.

Planned focus Multi-AZ failover, instance replacement, dependency failures, health checks, alarms, recovery validation, and documented runbooks.

CloudWatch Auto Scaling RDS Route 53 Terraform

Skills & Technical Focus

Technologies and architectural practices I use to design, automate, secure, and operate AWS environments.

Infrastructure as Code

Terraform modules, remote state, reusable environments, lifecycle management, and repeatable infrastructure deployment.

AWS Networking & Architecture

VPC design, subnetting, routing, load balancing, Auto Scaling, VPC endpoints, Route 53, and CloudFront delivery patterns.

Security & Identity

IAM least privilege, GitHub Actions OIDC federation, KMS encryption, Secrets Manager, private origins, and SSM-based administration.

CI/CD & Automation

GitHub Actions, Terraform plan/apply/destroy workflows, protected environments, deployment approvals, and automated validation.

Application Platforms & Services

ECS, Fargate, ECR, Docker, FastAPI, Lambda, API Gateway, DynamoDB, SQS, and Amazon Bedrock integration.

Reliability & Cost Optimization

Multi-AZ design, failure-mode analysis, NAT-less architectures, resource teardown strategies, and cost-aware service selection.

Certifications

Professional certification and current areas of technical development supporting my AWS architecture work.

AWS Certified Solutions Architect – Associate

SAA-C03 • Earned

Verified via Credly

Validated expertise in designing secure, resilient, and cost-optimized AWS architectures, including networking, compute, storage, identity, and architectural best practices.

Professional Development

Current areas of focus

Continuing to expand expertise in generative AI, Amazon Bedrock, cloud automation, reliability engineering, and AWS architecture patterns through hands-on portfolio projects.

Generative AI Amazon Bedrock Resilience Automation

About

I'm an AWS Certified Solutions Architect with a background in private cloud platforms, infrastructure automation, and quality engineering. My experience spans designing reliable systems, improving operational processes, and building automation that simplifies infrastructure management.

This portfolio documents the AWS architectures I've designed using Terraform and modern cloud-native services. Each project emphasizes secure defaults, Infrastructure as Code, operational discipline, and thoughtful architectural tradeoffs rather than simply demonstrating individual AWS services.

I'm particularly interested in cloud infrastructure, platform engineering, automation, containerized and serverless architectures, and designing systems that are secure, resilient, cost-aware, and straightforward to operate.

Contact

GitHub

github.com/HeathMSmith

linkedin.com/in/heath-m-smith

heathsmith2009@gmail.com