AWS Cost Protection Strategy
How a billing audit led to a layered AWS cost protection strategy using budget alerts, monthly reviews, region restrictions and IAM guardrails to reduce the risk of unexpected charges.
Read note →Cliffable is a cloud engineering portfolio documenting my transition from music and education into cloud architecture.
Through hands-on AWS projects, I design, build and document real systems covering web hosting, DNS, networking, monitoring and automation. Each project focuses on the architecture, implementation decisions and lessons learned along the way.
Built a highly available EC2-based website with multi-AZ networking, load balancing, Auto Scaling and serverless microservices, then migrated the static frontend to Amazon S3 and CloudFront to reduce complexity and operational overhead.
Designed and built a security-focused AWS architecture with private networking, controlled SSH access, Gateway VPC Endpoints and a custom least-privilege IAM policy, then validated the completed infrastructure.
Short technical notes from building, operating and improving real cloud systems.
How a billing audit led to a layered AWS cost protection strategy using budget alerts, monthly reviews, region restrictions and IAM guardrails to reduce the risk of unexpected charges.
Read note →How a security alert and monitoring alarms led to a broader review of my WordPress infrastructure, exposing weaknesses in security, domain management and operational processes.
Read note →How I consolidated Cliffable domains into a dedicated AWS account and built HTTPS redirects for secondary domains using Route 53, CloudFront, ACM and S3.
Read note →How a production outage and memory exhaustion revealed the limitations of a 1 GB Lightsail instance and led to an infrastructure upgrade.
Read note →
I’m transitioning into cloud architecture, focused on designing and building real-world systems on AWS.
Through hands-on projects, I explore how cloud services fit together in practice from networking and DNS to scalable, production-ready architectures.
This site documents that journey, with a focus on clarity, structure, and implementation.
Background in music and education (BMus Hons). AWS Certified Solutions Architect – Associate, and AWS Certified Cloud Practitioner.