Hi there 👋, I am Subhamay Bhattacharyya, 7x AWS, 1x Azure, 2x GitHub and 1x HashiCorp Terraform, 4 x Snowflake and 1 x Databricks Certified, 2 x Astronomer and 5x Atlassian Certified Data Engineer and a AWS Cloud Enthusiast
I'm a Senior Manager & Cloud Data Engineer with a strong focus on multi-cloud architecture, DevOps automation, and data platforms. I build production-grade cloud systems across AWS, Azure, and GCP using Terraform, GitHub Actions, Ansible, and serverless services, with a deep emphasis on security, observability, and cost-efficient design.
My work blends hands-on engineering with architectural leadership—from designing event-driven data pipelines and cloud-native analytics platforms to building enterprise-ready CI/CD pipelines using OIDC-based zero-trust authentication and infrastructure-as-code.
I’m currently developing a multi-cloud Cloud Resume Challenge platform, where the same production-grade architecture is deployed on:
- AWS — S3, CloudFront, Route 53, Lambda, DynamoDB, Kinesis, RDS, VPC, EC2, Athena, API Gateway, Glue, Step Functions, SNS, SQS, EventBridge, CloudWatch, IAM, KMS, Secrets Manager
- GCP — Cloud Storage, Cloud CDN, Cloud DNS, Workload Identity Federation
- Azure — Storage Static Website, Azure Front Door, Azure DNS
Everything is provisioned using Terraform modules, deployed via GitHub Actions with OIDC, and validated with Ansible-driven configuration management—mirroring how real-world cloud platforms are built and operated.
Alongside this, I build reusable GitHub Actions, Terraform modules, and data engineering pipelines for AWS Glue, Snowflake, BigQuery, and Azure Data Factory.
- Multi-cloud Infrastructure as Code (Terraform, HCP Terraform, GitHub OIDC)
- Serverless & Event-Driven Architectures (Lambda, Glue, Kinesis, Pub/Sub, Dataflow)
- Data Engineering Platforms (Snowflake, BigQuery, Athena, Glue, DMS)
- CI/CD & Platform Engineering (GitHub Actions, reusable workflows, DevContainers)
- Security & Observability (OIDC, IAM federation, Honeycomb, Splunk, lineage tracking)
I actively maintain a broad certification portfolio across AWS, Azure, GCP, Snowflake, GitHub, and Terraform, using them as a way to validate and deepen real-world engineering skills—not just theory.
To design and operate cloud platforms that are secure, automated, observable, and scalable by default—and to build public, open-source projects that demonstrate what modern cloud engineering really looks like in practice.
 Valid till: Apr 18, 2029 |
 Valid till: Jun 14, 2028 |
 Valid till: May 31, 2028 |
 Valid till: Aug 16, 2028 |
 Preparing |
 Valid till: Dec 20, 2027 |
 Valid till: Apr 18, 2029 |
 Valid till: Jul 25, 2029 |
 Preparing |
 Preparing |
 Valid till: Dec 20, 2028 |
 Valid till: 2026-07-29 |
 Issued: Dec 18, 2021 | No Expiry |
 Valid till: 2028-10-21 |
 Valid till: 2028-10-16 |
 Valid till: 2028-09-26 |
 Valid till: 2027-07-24 |
 Valid till: 2027-07-24 |
 Valid till: March 13, 2028 |
 Valid till: June 13, 2028 |
 Valid till: June 13, 2028 |
 Valid till: June 13, 2028 |
 Valid till: January 31, 2028 |
 Issued: Nov 10, 2025 | No Expiry |
 Issued: Nov 16, 2025 | No Expiry |
Legend: ⚪ Initialized 🟡 In Progress 🟢 Complete 🔴 Blocked
| # | Repository | Description |  |
 |
 |
 |
|---|---|---|---|---|---|---|
| 1 | 🟡 aws-security-compliance-automation Not available  |
🏗️ Cloud threat detection & security audit system using GuardDuty, AWS Config, Lambda, and CloudFormation for proactive security monitoring and compliance automation. 📝 🔹Zero To Cloud 🔹 AWS SECURITY ENGINEER PROJECTS 🔹 Cloud Threat Detection & Security Audit    |
1 | 1 | 0 | 82 KB |
| 2 | 🟡 aws-securecart-hardening Not available  |
🏗️ End-to-end AWS security architecture redesign for SecureCart e-commerce platform. Demonstrates VPC-based network isolation, private EC2/RDS deployment patterns, public ALB ingress, bastion host setup, IAM role enforcement, S3 private access controls, and AWS WAF implementation. Complete with IaC templates and architectural documentation. 📝 🔹Zero To Cloud 🔹 AWS SOLUTION ARCHIETCT PROJECTS 🔹 Secure Application Deployment on AWS (Security Pillar)   |
2 | 1 | 0 | 82 KB |
| 3 | 🟡 aws-chatopsbot Not available  |
🏗️ ChatOps automation for AWS operations via Slack. Real-time alerts, Lambda/SSM automation, and secure access control integrated with CloudWatch and EventBridge for faster incident response. 📝 🔹Zero To Cloud 🔹 AWS SOLUTION ARCHIETCT PROJECTS 🔹 Real-Time AWS Operations from Slack (Operational Excellence Pillar)   |
1 | 1 | 0 | 82 KB |
| 4 | 🟡 aws-cost-waste-detection-automation Not available  |
🏗️ AWS cost optimization automation framework that detects and eliminates wasteful resources across EC2, EBS, S3, and RDS using SSM Automation Documents with governance workflows and approval gates. 📝 🔹Zero To Cloud 🔹 AWS SOLUTION ARCHIETCT PROJECTS 🔹 Automated Cost Governance on AWS (Cost Optimization Pillar)   |
1 | 1 | 0 | 82 KB |
| 5 | 🟡 aws-2048-cicd-pipeline Not available  |
🏗️ Automated CI/CD pipeline for deploying a Dockerized 2048 game to AWS ECS using CodePipeline, ECR, and CodeBuild. 📝 🔹Zero To Cloud 🔹 AWS ADVANCED PROJECTS 🔹 Build a CI/CD Pipeline for the 2048 Game using AWS CodePipeline, ECS, and ECR   |
1 | 1 | 0 | 82 KB |
| 6 | 🟡 aws-multi-cloud-weather-tracker Not available  |
🏗️ A disaster-recovery enabled weather application deployed across AWS and Azure. Demonstrates multi-cloud infrastructure automation using Terraform, with Route 53 DNS failover for high availability. Includes static hosting on AWS S3/CloudFront and Azure Blob Storage. 📝 🔹Zero To Cloud 🔹 AWS ADVANCED PROJECTS 🔹 Multi-Cloud Weather Tracker website with Disaster Recovery using Terraform   |
1 | 1 | 0 | 82 KB |
| 7 | 🟡 aws-app-migration-ec2-rds-dms Not available  |
🏗️ End-to-end migration of CloudHR Employee Directory Application from on-premises Linux/MySQL to AWS (EC2 + RDS), demonstrating real-world application migration using AWS DMS, networking, IAM, and cloud-native architecture patterns. 📝 🔹Zero To Cloud 🔹 AWS CLOUD ENGINEER PROJECTS 🔹 On-Premise Application Migration to AWS   |
1 | 1 | 0 | 82 KB |
| 8 | 🟡 aws-zero-downtime-deployments Not available  |
🏗️ Hands-on implementation of zero-downtime deployment strategies on AWS using Blue-Green and Rolling Deployment patterns. Demonstrates production-level deployment architectures with Auto Scaling Groups, Application Load Balancers, and graceful instance management. 📝 🔹Zero To Cloud 🔹 AWS CLOUD ENGINEER PROJECTS 🔹 Blue Green and Rolling Infrastructure Deployments   |
1 | 1 | 0 | 82 KB |
| 9 | 🟡 bedrock-rag-faq-chatbot Not available  |
🏗️ Enterprise FAQ chatbot using Amazon Bedrock Knowledge Bases for document-grounded Q&A with serverless Lambda backend and S3-hosted web interface. 📝 Not Available 🔹Zero To Cloud 🔹 AWS CLOUD AI/ML ENGINEER PROJECTS 🔹 Intelligent FAQ Chatbot using Amazon Bedrock (RAG)   |
1 | 1 | 0 | 81 KB |
| 10 | 🟡 aws-sagemaker-subscription-prediction-api Not available  |
🏗️ Real-time machine learning API for predicting customer subscription likelihood using Amazon SageMaker, XGBoost, and automated deployment to SageMaker endpoints. 📝 🔹Zero To Cloud 🔹 AWS CLOUD AI/ML ENGINEER PROJECTS 🔹 Predicting Customer Subscriptions with Amazon SageMaker   |
1 | 1 | 0 | 82 KB |
| 11 | 🟡 aws-ecs-lms-troubleshooting Not available  |
🏗️ Learn AWS container troubleshooting through hands-on ECS Fargate deployment of an LMS application. Covers Docker containerization, ALB configuration, security group rules, IAM roles, and CloudWatch observability for production-ready deployments. 📝 🔹Zero To Cloud 🔹 AWS SUPPORT ENGINEER PROJECTS 🔹 Containerized LMS Migration and Troubleshooting   |
1 | 1 | 0 | 82 KB |
| 12 | 🟡 aws-cicd-pipeline-troubleshooting Not available  |
🏗️Production-grade CI/CD pipeline demonstrating automated deployment workflows using AWS CodePipeline and CodeDeploy, with built-in misconfigurations to diagnose and resolve real-world deployment issues. Includes EC2 hosting, GitHub integration, CloudWatch monitoring, and IAM security best practices. 📝 🔹Zero To Cloud 🔹 AWS SUPPORT ENGINEER PROJECTS 🔹 Implementing a CI/CD Pipeline for GlobalMart E-Commerce Platform   |
1 | 1 | 0 | 82 KB |
| 13 | 🟡 aws-cloudwatch-guardduty-automation Not available  |
🏗️ A comprehensive, production-ready monitoring and automated remediation system for the fictional financial services company CloudGuard. This project simulates real-world incident detection and response across multi-environment AWS infrastructure. 📝 🔹Zero To Cloud 🔹 AWS SUPPORT ENGINEER PROJECTS 🔹 Proactive Monitoring & Security Auto-Remediation for EC2   |
1 | 1 | 0 | 82 KB |
| 14 | 🟡 aws-serverless-contact-form-debugger Not available  |
🏗️ Cloud Support Engineer training project: Debug and fix a broken serverless contact form workflow using AWS CloudFormation, Lambda, DynamoDB, SNS, and CloudWatch. Hands-on troubleshooting of permission issues, log analysis, and service integration problems. 📝 🔹Zero To Cloud 🔹 AWS SUPPORT ENGINEER PROJECTS 🔹 Repair Shop Application Deployment on AWS   |
1 | 1 | 0 | 82 KB |
| 15 | 🟡 aws-ecs-cicd-pipeline Not available  |
🏗️ Production-ready CI/CD pipeline demonstrating containerized deployment to AWS ECS Fargate with automated GitHub Actions workflows, load balancing, and zero-downtime deployments 📝 🔹Zero To Cloud 🔹 AWS DEVOPS ENGINEER PROJECTS 🔹 Build a Production-Ready CI/CD Pipeline on AWS   |
1 | 1 | 0 | 82 KB |
| 16 | 🟡 aws-iac-foundation Not available  |
🏗️A comprehensive hands-on project demonstrating Infrastructure as Code (IaC) principles using Terraform and AWS. Build production-ready AWS infrastructure from scratch with remote state management, modular design, and DevOps best practices. 📝 🔹Zero To Cloud 🔹 AWS DEVOPS ENGINEER PROJECTS 🔹 Infrastructure as Code (IaC) with Terraform for AWS Environments   |
1 | 1 | 0 | 82 KB |
| 17 | 🟡 aws-terraform-ansible-ec2-automation Not available  |
🏗️End-to-end infrastructure automation project combining Terraform provisioning and Ansible configuration management for consistent EC2 server setup in AWS. Demonstrates core DevOps workflows for replacing manual server configuration with repeatable, idempotent automation. 📝 🔹Zero To Cloud 🔹 AWS DEVOPS ENGINEER PROJECTS 🔹 Configuration Management with Ansible on AWS   |
1 | 1 | 0 | 82 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟡 aws-stock-analytics-pipeline Not available  |
🏗️ 📌 Real-time stock market data analytics pipeline built on AWS. Ingests streaming stock data via Amazon Kinesis, processes with Lambda, detects anomalies, and stores in DynamoDB/S3. Features CloudFormation infrastructure-as-code and GitHub Actions CI/CD workflows for automated deployment. 📝 Created - S3,DynamoDB,CW Log Group,IAM Role, Lambda 🔹Zero To Cloud 🔹 AWS ADVANCED PROJECTS 🔹 Stock Market Real-Time Data Analytics Pipeline on AWS    |
2 | 1 | 0 | 97 KB |
| 2 | 🟡 aws-receipt-processing-system Not available  |
🏗️ 📌 Serverless, event-driven receipt processing system on AWS. Users upload receipts to Amazon S3, which triggers a Lambda function to extract structured data via Amazon Textract, persist results to DynamoDB, and dispatch email notifications through Amazon SES. Fully infrastructure-as-code managed for reproducible deployments. 📝 Created - S3,DynamoDB,IAM Role, Lambda 🔹Zero To Cloud 🔹 AWS INTERMEDIATE PROJECTS 🔹 Automated AWS Receipt Processing System   |
2 | 1 | 0 | 110 KB |
| 3 | 🟡 aws-secure-website-oac-waf Not available  |
🏗️ 📌 Secure, serverless static website hosted on AWS S3 with CloudFront, Origin Access Control, and HTTPS enforced. Protected by AWS WAF against SQLi, XSS, bots, and malicious traffic, with least-privilege IAM policies across all resources. CloudWatch and CloudTrail provide full logging, monitoring, and anomaly detection. 📝 Created - S3, CloudFront 🔹Zero To Cloud 🔹 AWS SECURITY ENGINEER PROJECTS 🔹 Secure Web Hosting on AWS: S3, CloudFront & WAF   |
2 | 1 | 0 | 110 KB |
| 4 | 🟡 aws-event-announcement-system Not available  |
🏗️ 📌 Serverless event announcement website on AWS, fully event-driven from end to end. A static S3-hosted frontend calls API Gateway endpoints backed by Lambda functions to register events and capture subscribers, with Amazon SNS dispatching email notifications and events.json in S3 acting as the source of truth — all provisioned as code. 📝 Created - S3 🔹Zero To Cloud 🔹 AWS INTERMEDIATE PROJECTS 🔹 Build an Event Announcement System using SNS, Lambda and API Gateway   |
2 | 1 | 0 | 101 KB |
| 5 | 🟡 aws-image-labels-generator Not available  |
🏗️ 📌 Python-based image labeling application using Amazon Rekognition and S3. Automatically detects and labels objects in images through AWS Rekognition API. Includes CLI setup, configuration, and batch image processing capabilities. 📝 Created - S3 🔹Zero To Cloud 🔹 AWS BEGINNER PROJECTS 🔹 Build an image labels generator using Amazon Rekognition   |
2 | 1 | 0 | 94 KB |
| 6 | 🟡 aws-lex-translation-bot Not available  |
🏗️ 📌 A language translation chatbot built with Amazon Lex, Lambda, and Amazon Translate. Type text → Get instant translations across supported languages. 📝 Created - IAM Role, CW Log Group, Lambda 🔹Zero To Cloud 🔹 AWS BEGINNER PROJECTS 🔹 Build a language translation bot using Amazon Lex   |
2 | 1 | 0 | 85 KB |
| 7 | 🟡 aws-polly-text-narrator Not available  |
🏗️ 📌 AWS serverless text-to-speech pipeline: Upload text to S3, trigger Lambda to convert via Amazon Polly with customizable voice parameters (pitch, speed, voice type). 📝 Created - S3 🔹Zero To Cloud 🔹 AWS BEGINNER PROJECTS 🔹 Develop a text narrator using Amazon Polly   |
2 | 1 | 0 | 83 KB |
| 8 | 🟡 aws-amplify-bucket-list-tracker Not available  |
🏗️ 📌 A full-stack serverless bucket list tracker application built with AWS Amplify, React, GraphQL (AppSync), and DynamoDB. Features user authentication, real-time data sync, and image storage. 📝 🔹Zero To Cloud 🔹 AWS BEGINNER PROJECTS 🔹 Deploy a bucket list tracker application on AWS Amplify   |
2 | 1 | 0 | 84 KB |
| 9 | 🟡 aws-csv-data-pipeline Not available  |
🏗️ 📌 Serverless, event-driven data pipeline on AWS for processing CSV files end-to-end. Raw uploads to S3 trigger a Lambda preprocessor, AWS Glue crawls and catalogs the cleaned data, a Glue ETL job transforms it into the final dataset, and Amazon QuickSight delivers interactive dashboards for analytics and reporting. 📝 Created - S3 🔹Zero To Cloud 🔹 AWS INTERMEDIATE PROJECTS 🔹 Data Pipeline for Processing CSV Files Using S3, Lambda, Glue, and QuickSight   |
2 | 1 | 0 | 110 KB |
| 10 | 🟡 aws-cloud-dictionary Not available  |
🏗️ 📌 A serverless cloud terminology search application built with AWS services. Users can search for and learn cloud technology definitions. Features React frontend hosted on Amplify, Lambda-powered API, API Gateway routing, and DynamoDB persistence. 📝 Created - DynamoDB table,IAM Role, CW Log Group, Lambda 🔹Zero To Cloud 🔹 AWS INTERMEDIATE PROJECTS 🔹 Serverless Cloud Dictionary Application   |
2 | 1 | 0 | 88 KB |
| 11 | 🟡 aws-todo-app-deployment Not available  |
🏗️ 📌 Two-tier To-Do List web application on AWS with EC2, RDS, and ALB for scalability and high availability. 📝 Created - VPC,Subnets,IGW,RT 🔹Zero To Cloud 🔹 AWS INTERMEDIATE PROJECTS 🔹 Two-Tier Website Deployment on AWS using EC2, RDS and ALB   |
2 | 1 | 0 | 86 KB |
| 12 | 🟡 aws-cognito-university-portal Not available  |
🏗️ Secure identity and access management system for a university student portal using Amazon Cognito. Implements multi-factor authentication (MFA), role-based access control (RBAC), and strong password policies for Students and Professors. 📝 🔹Zero To Cloud 🔹 AWS SECURITY ENGINEER PROJECTS 🔹 Identity & Access Security with Cognito and API Gateway   |
1 | 1 | 0 | 82 KB |
| 13 | 🟡 aws-secure-file-sharing-protection Not available  |
🏗️ 📌 AWS-based secure file-sharing service with real-time malware detection, sensitive data protection, and DDoS mitigation using S3 Object Lambda, Amazon Macie, and CloudFront 📝 Created - S3,CW Log, IAM Role 🔹Zero To Cloud 🔹 AWS SECURITY ENGINEER PROJECTS 🔹 Secure File Sharing & Malware Protection   |
2 | 1 | 0 | 93 KB |
| 14 | 🟡 aws-secrets-encryption-system Not available  |
🏗️ Production-grade secrets management & encryption system using AWS Secrets Manager, KMS, and Lambda with automated rotation, least-privilege IAM, and compliance auditing. 📝 🔹Zero To Cloud 🔹 AWS SECURITY ENGINEER PROJECTS 🔹 Secrets Management & Encryption for Applications   |
2 | 1 | 0 | 84 KB |
| 15 | 🟡 aws-healthcare-ha-infrastructure Not available  |
🏗️ 📌 Multi-AZ fault-tolerant infrastructure for MediCare Hub medical application on AWS. Implements auto-scaling, self-healing EC2 instances, RDS Multi-AZ, Route 53 DNS failover, and ALB-based traffic distribution aligned with the AWS Well-Architected Framework Reliability Pillar. 📝 Created - VPC,Subnets,IGW,RT 🔹Zero To Cloud 🔹 AWS SOLUTION ARCHIETCT PROJECTS 🔹 Highly Available Architecture on AWS (Reliability Pillar)   |
2 | 1 | 0 | 87 KB |
| 16 | 🟡 aws-serverless-coffee-inventory Not available  |
🏗️ 📌 Serverless REST API for coffee shop inventory management built on AWS Lambda, API Gateway, and DynamoDB with React frontend on Amplify. Demonstrates AWS Well-Architected Framework performance efficiency patterns. 📝 🔹Zero To Cloud 🔹 AWS SOLUTION ARCHIETCT PROJECTS 🔹 Serverless Inventory Management on AWS (Performance Efficiency Pillar)   |
2 | 1 | 0 | 87 KB |
| 17 | 🟡 aws-sagemaker-threat-detection-pipeline Not available  |
🏗️ 📌 ML-powered cybersecurity threat detection system using Amazon SageMaker, Lambda, and S3 for real-time anomaly detection in network traffic. 📝 Created - S3 🔹Zero To Cloud 🔹 AWS ADVANCED PROJECTS 🔹 Building & Deploying a Cybersecurity Threat Detection System using Amazon SageMaker   |
2 | 1 | 0 | 87 KB |
| 18 | 🟡 aws-wordpress-3tier-architecture Not available  |
🏗️ 📌 Infrastructure as Code for deploying a production-ready WordPress website on AWS using a 3-tier architecture with load balancing, auto-scaling compute, and managed database services. 📝 Created - VPC,Subnets,IGW,RT 🔹Zero To Cloud 🔹 AWS ADVANCED PROJECTS 🔹 Traditional 3-Tier WordPress website Deployment on AWS   |
2 | 1 | 0 | 87 KB |
| 19 | 🟡 aws-multi-vpc-privatelink Not available  |
🏗️📌 Production-ready multi-VPC architecture demonstrating AWS PrivateLink for secure internal service consumption. Features isolated Payments, Analytics, and Shared Services VPCs with private-only connectivity, internal NLB, and VPC Endpoint Service patterns. Built with Terraform and CloudFormation for infrastructure-as-code best practices. 📝 🔹Zero To Cloud 🔹 AWS CLOUD ENGINEER PROJECTS 🔹 Multi-VPC Networking and PrivateLink Architecture   |
2 | 1 | 0 | 88 KB |
| 20 | 🟡 aws-serverless-order-pipeline Not available  |
🏗️ 📌 Event-driven order processing system built with AWS serverless services. Demonstrates order ingestion, async processing, retry mechanisms, high-value order routing, dead-letter queue handling, and real-time alerting using Lambda, DynamoDB, SQS, EventBridge Pipes, and SNS. 📝 Created - DynamoDB 🔹Zero To Cloud 🔹 AWS CLOUD ENGINEER PROJECTS 🔹 Event-Driven Order Processing System on AWS   |
2 | 1 | 0 | 98 KB |
| 21 | 🟡 aws-global-accelerator-multi-region Not available  |
🏗️ A hands-on AWS multi-region architecture demonstrating high availability and global resilience. Deploys a web application across two AWS regions with AWS Global Accelerator for intelligent traffic routing, Application Load Balancing, Route 53 health checks, and automatic regional failover. 📝 Created - VPC,Subnet,IGW,RT 🔹Zero To Cloud 🔹 AWS CLOUD ENGINEER PROJECTS 🔹 Global Accelerator-Based Multi-Region Failover on AWS   |
2 | 1 | 0 | 87 KB |
| 22 | 🟡 aws-serverless-emotion-detection Not available  |
🏗️ Serverless AI application for real-time facial emotion detection using Hugging Face Inference API, AWS Lambda, API Gateway, and S3. Detects emotions from images for customer sentiment analysis and marketing campaign optimization. 📝 Created - S3, Lambda, IAM Role, CW Log 🔹Zero To Cloud 🔹 AWS CLOUD AI/ML ENGINEER PROJECTS 🔹 Image Emotion Detector using Hugging Face Vision Transformer   |
2 | 1 | 0 | 87 KB |
| 23 | 🟡 aws-bedrock-faq-chatbot Not available  |
🏗️ 📌 A secure, enterprise-ready FAQ chatbot powered by Amazon Bedrock Knowledge Bases. Demonstrates RAG (Retrieval-Augmented Generation) with grounded Q&A, no hallucinations, and document-aware responses. Built with Lambda Function URL backend, S3-hosted frontend, and fully contained within AWS for security and compliance. 📝 Created - S3,IAM Role 🔹Zero To Cloud 🔹 AWS CLOUD AI/ML ENGINEER PROJECTS 🔹 Intelligent FAQ Chatbot using Amazon Bedrock (RAG)   |
2 | 1 | 0 | 93 KB |
| 24 | 🟡 aws-serverless-genai-tutor Not available  |
🏗️ 📌 A production-grade serverless generative AI tutoring platform integrating Gemini API with AWS services for secure, scalable cloud learning. Includes complete infrastructure setup, secure secrets management, and full-stack deployment patterns. 📝 Created - S3, DynamoDB,IAM Role, CW Log Group, Lambda 🔹Zero To Cloud 🔹 AWS CLOUD AI/ML ENGINEER PROJECTS 🔹 AI-Powered Cloud Learning Assistant using Gemini API   |
2 | 1 | 0 | 89 KB |
| 25 | 🟡 aws-eks-kubernetes-fundamentals Not available  |
🏗️ A comprehensive guide to deploying containerized applications on Amazon EKS. This project builds confidence in Kubernetes by covering Deployments, Pods, Services (NodePort), and AWS integration. Intentionally focused on core concepts over production optimization. 📝 🔹Zero To Cloud 🔹 AWS DEVOPS ENGINEER PROJECTS 🔹 Kubernetes Deployment and Autoscaling on Amazon EKS   |
2 | 1 | 0 | 82 KB |
| 26 | 🟡 aws-cloudwatch-monitoring-stack Not available  |
🏗️ 📌 Production-grade AWS monitoring and alerting infrastructure setup using CloudWatch, SNS, and IAM for real-time incident detection and response. 📝 Created - SNS Topic 🔹Zero To Cloud 🔹 AWS DEVOPS ENGINEER PROJECTS 🔹 Monitoring, Alerting & Incident Response on AWS   |
2 | 1 | 0 | 87 KB |
| 27 | 🟡 aws-smart-inbox-sentiment-router Not available  |
🏗️📌AI-powered Smart Inbox with AWS Lambda, Comprehend, and SQS for real-time sentiment-based message routing and intelligent support queue management. 📝 Created - S3, Lambda , IAM Role, CW Log 🔹Zero To Cloud 🔹 AWS CLOUD AI/ML ENGINEER PROJECTS 🔹 Build a Serverless Smart Inbox with Real-Time Sentiment Analysis   |
2 | 1 | 0 | 88 KB |
| 28 | ⚪ aws-e-commerce-application Not available  |
🏗️ 📌 Production-grade, cloud-native eCommerce application built on AWS: React frontend on S3 and CloudFront, containerized microservices on ECS/Fargate behind API Gateway, Cognito authentication, DynamoDB and RDS PostgreSQL data, and SNS, SQS, and SES notifications. Covers VPC networking, Route53 DNS, and ALB integration for scalable deployments. 📝 Created - VPC,IGW,Subnets,RT,NatGW,S3, DyanmoDB 🔹Udemy 🔹 Chetan Agarwal 🔹   |
2 | 1 | 0 | 90 KB |
| 29 | 🟡 aws-epicbook-two-tier-website Not available  |
🏗️ CloudFormation automation for EpicBook three-tier web application deployment on AWS. Part of Pravin Mishra's DevOps Micro Internship (DMI) Cohort 3. Deploys Nginx frontend, Node.js backend, and MySQL RDS with secure VPC networking. Includes infrastructure code, security group configuration, and end-to-end validation. 📝 Not Available 🔹DevOps Micro Internship with Agentic AI by Pravin Mishra 🔹 🔹 Epic Bookstore Website   |
2 | 1 | 0 | 87 KB |
| 30 | ⚪ elara-bedrock-agentcore-agent Not available  |
🏗️ Production-ready customer service AI agent (Elara) for a sample e-commerce company, built on Amazon Bedrock AgentCore. Covers the agent runtime, Bedrock Knowledge Bases for policy grounding, tool integration through AgentCore Gateway, memory, Cognito authentication, policy-engine guardrails, and AgentCore Browser for shipment tracking.   |
2 | 1 | 0 | 82 KB |
| 31 | ⚪ elara-backend-microservice Not available  |
CloudFormation-deployed sample backend microservice built on AWS Lambda, Amazon API Gateway, and Amazon DynamoDB. Exposes REST APIs for products, orders, returns, and shipment tracking, and serves as the tool backend for the Elara agent, which reaches it through AgentCore Gateway.🏗️   |
2 | 1 | 0 | 82 KB |
| 32 | ⚪ aws-realtime-ingestion Not available  |
🏗️ Hands-on lab for real-time clickstream ingestion on AWS. Builds a Kinesis Data Firehose stream that saves to S3, transforms records with Lambda, and queries them with Glue and Athena. Extended with a Lambda path that writes to DynamoDB, and tuned by changing the S3 buffer interval to 60 seconds. 📝 SIMULEARN   |
1 | 0 | 0 | 82 KB |
| 33 | ⚪ aws-genai-equipment-sme-assistant Not available  |
🏗️ Production-ready GenAI assistant that uses Amazon Bedrock foundation models to summarize wind turbine field incident logs for remote equipment SMEs, reducing turbine downtime and boosting SME productivity. Built as a hands-on course project starting from a clear enterprise business use case. - Udemy Rahul Trisal   |
2 | 1 | 0 | 82 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟢 aws-lab01-vpc-single-public-subnet   |
✅ Lab 1 of an AWS networking series: build a custom VPC with an internet gateway, public subnet, route table, and auto-assigned public IP, then launch an EC2 instance in N.Virginia (us-east-1) and connect to it over SSH from a Windows workstation using PuTTY and a PPK key. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 VPC with Single Public Subnet    |
2 | 1 | 0 | 354 KB |
| 2 | 🟢 aws-lab02-private-subnet-ec2-access   |
✅ Lab 2 of an AWS networking series: adds a private subnet with its own route table (no internet route) to the Lab 1 VPC, launches a private EC2 instance with no public IP, and SSHes into it from the public instance. Confirms the private instance cannot reach the internet. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 Private Subnet with EC2 Access   |
2 | 1 | 0 | 179 KB |
| 3 | 🟡 aws-lab03-nat-gateway-private-egress Not available  |
🏗️ 📌 Lab 3 of an AWS networking series. Adds a second public subnet and a NAT gateway with an Elastic IP to the Lab 1 VPC, then routes the private subnet’s internet-bound traffic through it. Confirms that EC2 B can reach the internet while staying free of public IPs. Notes the NAT gateway’s hourly and data charges. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 NAT Gateway for Private Egress   |
2 | 1 | 0 | 98 KB |
| 4 | ⚪ aws-lab04-vpc-peering-cross-region Not available  |
🏗️ Lab 4 of an AWS networking series: connects VPC A (Ohio) and VPC B (North Virginia) with a cross-region VPC peering connection. Covers non-overlapping CIDRs, requester and accepter setup, and route table entries on both sides so private EC2 instances can communicate. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 VPC Peering Across Regions   |
2 | 1 | 0 | 96 KB |
| 5 | 🟡 aws-lab05-vpc-gateway-endpoint-s3 Not available  |
🏗️ 📌 Lab 5 of an AWS networking series. Gives EC2 B in a private subnet access to S3 without a NAT gateway or internet route. Uses an IAM role with S3 read-only access, then adds an S3 gateway endpoint to the private route table so traffic to S3 goes through the prefix list. Verifies by downloading an object with the AWS CLI. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 VPC Gateway Endpoint for S3   |
2 | 1 | 0 | 101 KB |
| 6 | 🟡 aws-lab06-vpc-interface-endpoint-sqs Not available  |
🏗️ 📌 Lab 6 of an AWS networking series: enables private DNS on VPC A, then creates an SQS interface endpoint with a security group allowing HTTPS (443) from the VPC CIDR. EC2 B sends messages to SQS over AWS PrivateLink, with no internet or NAT path. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 VPC Interface Endpoint for SQS   |
2 | 1 | 0 | 100 KB |
| 7 | ⚪ aws-lab07-vpc-privatelink-saas-service Not available  |
🏗️Lab 7 of an AWS networking series. Models a SaaS provider and consumer on AWS PrivateLink. Builds VPC B with a private subnet and an internal Network Load Balancer in front of a web server AMI. Exposes it as a VPC endpoint service, then creates an interface endpoint in VPC A so EC2 B can reach it privately using the AWS-generated DNS name. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 VPC PrivateLink SaaS Service   |
2 | 1 | 0 | 92 KB |
| 8 | ⚪ aws-lab08-site-to-site-vpn Not available  |
🏗️ Lab 8 of an AWS networking series: simulates an on-prem network with a LibreSwan VPN server, then connects it to VPC A via a virtual private gateway and static-routed site-to-site VPN. Covers routing, source/destination checks, and end-to-end private pings. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 Site-to-Site VPN   |
2 | 1 | 0 | 91 KB |
| 9 | ⚪ aws-lab09-client-vpn-mutual-auth Not available  |
🏗️ Lab 9 of an AWS networking series. Sets up AWS Client VPN with mutual certificate authentication: generates a CA, server and client certificates with EasyRSA, imports them into ACM, and builds a VPC with an application subnet and a client VPN target subnet. Connects a laptop via OpenVPN to reach a private EC2 instance over its private IP. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 Client VPN with Mutual Authentication   |
2 | 1 | 0 | 92 KB |
| 10 | ⚪ aws-lab10-client-vpn-split-tunnel Not available  |
🏗️ Lab 10 of an AWS networking series: switches an AWS Client VPN endpoint to split tunnel mode so VPC traffic uses the VPN and internet traffic uses the local network. Covers fixing DNS on OpenVPN and outlines routing via the VPC’s internet gateway. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 Client VPN with Split Tunnel   |
2 | 1 | 0 | 92 KB |
| 11 | ⚪ aws-lab11-transit-gateway-hub-spoke Not available  |
🏗️Lab 11 of an AWS networking series. Connects three VPCs (A, B, and C) through an AWS Transit Gateway with VPC attachments in one subnet each. Adds a jump host in VPC A’s public subnet, then uses the default route table’s propagated routes and a 10.0.0.0/8 route in each private route table to verify private ping and SSH between instances. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 Transit Gateway Hub and Spoke   |
2 | 1 | 0 | 91 KB |
| 12 | ⚪ aws-lab12-transit-gateway-attachment-route-tables Not available  |
🏗️ Lab 12 of an AWS networking series. Builds on the Transit Gateway hub by disabling default route table association and propagation, then creating a separate route table per VPC attachment. Allows VPC A to reach VPC B and VPC B to reach VPC C, while blocking VPC A to VPC C. Covers propagations, black-hole routes, and private route table entries. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 Transit Gateway Attachment Routing   |
2 | 1 | 0 | 92 KB |
| 13 | 🟡 aws-lab13-route53-custom-domain-web-server Not available  |
🏗️ 📌 Lab 13 of an AWS networking series. Points a custom domain in a Route 53 hosted zone at the public IP of a web server using an A record with a short TTL, then confirms the site loads over HTTP using the domain name. Covers releasing the Elastic IP and terminating the instance afterward to avoid charges. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 Route 53 Custom Domain for Web Server   |
2 | 1 | 0 | 1.53 MB |
| 14 | ⚪ aws-lab14-route53-failover-routing Not available  |
🏗️ Lab 14 of an AWS networking series: sets up Route 53 failover routing between a Mumbai primary and North Virginia secondary web server. An HTTP health check on the primary drives the failover, which is tested by stopping the primary 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 Route 53 Failover Routing   |
2 | 1 | 0 | 92 KB |
| 15 | 🟡 aws-lab15-s3-static-website-route53 Not available  |
🏗️ 📌 Lab 15 of an AWS networking series. Hosts a static website in an S3 bucket named after the domain (www subdomain), enables static website hosting with a public bucket policy, and points the domain at the S3 website endpoint in Route 53 using an alias A record. Covers custom nameserver delegation to Route 53 and the wait for DNS propagation. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 S3 Static Website with Route 53   |
2 | 1 | 0 | 90 KB |
| 16 | 🟡 aws-lab16-alb-private-targets Not available  |
🏗️ 📌 Lab 16 of an AWS networking series: builds a VPC with public and private subnets across two AZs, launches two web servers from custom AMIs in the private subnets, and fronts them with an internet-facing Application Load Balancer and an HTTP target group. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 ALB with Private Targets   |
2 | 1 | 0 | 161 KB |
| 17 | 🟡 aws-lab17-alb-sticky-sessions Not available  |
🏗️ 📌 Lab 17 of an AWS networking series. Enables session stickiness on the ALB target group with load balancer-generated cookies and a 15-second duration. Shows that a browser stays on one web server while active, then moves to another after the cookie expires. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 ALB Sticky Sessions   |
2 | 1 | 0 | 92 KB |
| 18 | 🟡 aws-lab18-alb-host-based-routing Not available  |
🏗️ 📌 Lab 18 of an AWS networking series: adds host-based routing to an Application Load Balancer, with separate Asia and Europe target groups, listener rules matching each host header, and Route 53 alias records for both subdomains. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 ALB Host-Based Routing   |
2 | 1 | 0 | 92 KB |
| 19 | 🟡 aws-lab19-alb-https-acm-certificate Not available  |
🏗️ 📌 Lab 19 of an AWS networking series. Enables HTTPS on the Application Load Balancer by requesting a public ACM certificate for the custom domain with DNS validation in Route 53. Adds an HTTPS:443 listener using that certificate, forwarding to the existing target group, and opens port 443 in the ALB security group. Backend traffic stays HTTP. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹 ALB HTTPS with ACM Certificate   |
2 | 1 | 0 | 100 KB |
| 20 | 🟡 aws-lab20-alb-path-based-routing Not available  |
🏗️ 📌 Lab 20 of an AWS networking series: enables HTTPS on the Application Load Balancer with a public ACM certificate validated through Route 53, adds an HTTPS:443 listener, and opens port 443 in the ALB security group. Backend traffic stays HTTP. 📝 🔹Udemy 🔹 Chetan Agarwal 🔹   |
2 | 1 | 0 | 90 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟡 aws-athena-iceberg-demo Not available  |
A hands-on demo showcasing Apache Iceberg tables on Amazon S3 queried using Amazon Athena, with table creation, schema evolution, and partitioned analytics. 📝 Done - S3 bucket created. Next - Create Athena tables   |
4 | 3 | 2 | 172 KB |
| 2 | 🟡 s3-storage-best-practice Not available  |
S3 Security Best Practices using Terraform. 📝 Terraform test not added to CI pipeline   |
3 | 3 | 2 | 339 KB |
| 3 | ⚪ terraform-aws-iceberg-table Not available  |
Terraform project to provision Apache Iceberg tables on AWS S3 using AWS Glue Data Catalog, integrating S3 storage, Glue databases, catalog tables, and crawlers for a scalable data lakehouse architecture.   |
4 | 3 | 2 | 327 KB |
| 4 | 🟡 aws-serverless-security Not available  |
🏗️ Hands-on workshop to secure a serverless AWS application across seven defense-in-depth layers using AI-powered automation. Covers Cognito adaptive auth, WAF edge protection, VPC isolation, Lambda hardening with Kiro, Secrets Manager, DynamoDB encryption, and a Bedrock AI agent for GuardDuty incident response via EventBridge.   |
2 | 1 | 0 | 180 KB |
| 5 | 🔴 aws-data-lake-cart-abandonment Not available  |
🏗️ Layered AWS data lake for analyzing e-commerce cart abandonment. Raw events from the backend land in an S3 raw zone, EventBridge-triggered Lambda functions process and aggregate them into a consumption zone, and a promotions Lambda reads the curated data to generate targeted discount offers for customers. Built as an AWS SimuLearn solution.   |
4 | 3 | 3 | 219 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟡 devops-micro-internship-pravinmishra Not available  |
DevOps Micro Internship with Agentic AI — Cohort 3 assignment template by Pravin Mishra. Fork this repo to submit your weekly assignments. 📝 DMI by Pravin Mishra    |
1 | 0 | 0 | 134.94 MB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟡 cloudformation-template   |
✅ AWS CloudFormation template repository with CLAUDE.md documentation and integrated Claude skills for infrastructure-as-code generation. Provides a structured foundation for building reusable CloudFormation templates with AI-assisted code generation, validation, and documentation workflows. 📝 None    |
1 | 0 | 0 | 226 KB |
| 2 | 🟡 cfn-nested-aws-iam-roles-policies Not available  |
🏗️ AWS CloudFormation template suite for provisioning least-privilege IAM roles with inline policies across common use cases including data pipelines, REST APIs, event processing, data science/ETL, and container workloads with flexible permission scoping and automated deployment. 📝 Feature branch working fine.   |
2 | 1 | 0 | 210 KB |
| 3 | 🟡 cfn-nested-aws-dynamodb-table Not available  |
🏗️ Enterprise-grade nested CloudFormation templates for deploying AWS DynamoDB tables. Supports flexible configuration of Local Secondary Indexes (LSI), Global Secondary Indexes (GSI), DynamoDB Streams, TTL, and Point-in-Time Recovery. Includes modular nested stack and standalone template architectures with comprehensive documentation and examples 📝 Feature branch working fine.   |
2 | 1 | 0 | 178 KB |
| 4 | 🟡 cfn-nested-aws-lambda-function Not available  |
🏗️ A reusable CloudFormation nested stack template for provisioning AWS Lambda functions with comprehensive configuration including runtime selection, memory allocation, timeout settings, IAM execution roles, VPC integration, environment variables, CloudWatch logging, and layer support for shared code dependencies across dev,test and prod. 📝 None   |
2 | 1 | 0 | 241 KB |
| 5 | 🟡 cfn-nested-aws-sqs-queue Not available  |
🏗️ A reusable CloudFormation nested stack template designed to deploy Amazon SQS queues with support for Standard and FIFO queue types, configurable visibility timeout, message retention periods, dead-letter queue settings, server-side encryption (SSE-SQS/SSE-KMS), access policies, and CloudWatch metric alarms for asynchronous messages 📝 None   |
2 | 1 | 0 | 169 KB |
| 6 | 🟡 cfn-nested-aws-cloudwatch-log-group Not available  |
🏗️ A reusable CloudFormation nested stack template for provisioning AWS CloudWatch Log Groups with configurable log retention policies (1 day to 10 years), KMS encryption support, resource-based access policies. 📝 Feature branch working fine.   |
2 | 1 | 0 | 190 KB |
| 7 | 🟡 cfn-nested-aws-kinesis-data-stream Not available  |
🏗️ Reusable CloudFormation template that provisions an Amazon Kinesis Data Stream for ingesting and processing real-time streaming data, with configurable shard count and retention period. 📝 None   |
2 | 1 | 0 | 164 KB |
| 8 | 🟡 cfn-nested-aws-cloudfront-distribution Not available  |
🏗️ Reusable CloudFormation nested stack templates for Amazon CloudFront distributions: standalone, root, and nested component templates with 20-30+ parameters, security best practices, cost estimation, and README, usage guide and deployment examples. Follows the DynamoDB reference pattern with 5+ real-world scenarios. 📝 None   |
2 | 1 | 0 | 173 KB |
| 9 | 🟡 cfn-nested-aws-subnets Not available  |
🏗️ Reusable CloudFormation nested stack that creates subnets and route tables in an existing VPC. Takes VPC ID, AZs, IP ranges, subnet count, and subnet qualifier (public/private). Creates one route table per AZ, named --, and a public route table only for public subnets. 📝 None   |
2 | 1 | 0 | 185 KB |
| 10 | 🟡 cfn-nested-aws-ec2-instance Not available  |
🏗️ CloudFormation nested stack template that provisions an EC2 instance with an IAM instance profile and user data bootstrap script. Built as a reusable component for the nested-template library. 📝 None   |
2 | 1 | 0 | 173 KB |
| 11 | 🟡 cfn-nested-aws-ec2-security-group Not available  |
🏗️ Reusable CloudFormation nested stack for EC2 security groups. The root template creates a security group and its ingress and egress rules through a nested component template, with parameter-driven configuration and security best practices built in. 📝 None   |
2 | 1 | 0 | 183 KB |
| 12 | 🟡 cfn-aws-nested-acm-dns Not available  |
🏗️ 📌 CloudFormation template for AWS nested stacks that provisions a DNS-validated ACM certificate and a Route 53 record for a domain, with parameters for hosted zone, domain, SANs, and record target. 📝 None   |
2 | 1 | 0 | 100 KB |
| 13 | 🟡 cfn-nested-aws-s3-bucket Not available  |
🏗️ AWS CloudFormation nested stack template for provisioning production-grade S3 buckets with configurable encryption, versioning, lifecycle policies, access logging, and comprehensive tagging support. 📝 Feature branch working fine.   |
2 | 1 | 0 | 163 KB |
| 14 | 🟡 cfn-nested-aws-vpc Not available  |
🏗️ Nested CloudFormation template that creates a VPC and, when the EnableInternetGateway parameter is true, an optional Internet Gateway. 📝 None   |
2 | 1 | 0 | 173 KB |
| 15 | 🟡 cfn-nested-aws-sns-topic Not available  |
🏗️ A reusable CloudFormation nested stack template for creating Amazon SNS topics with full pub-sub pattern support including topic subscriptions to Lambda, SQS, Email, and HTTP endpoints, server-side encryption, access control policies, message filtering, delivery status logging, content-based deduplication for FIFO topics, and DLQ handling. 📝 None   |
2 | 1 | 0 | 172 KB |
| 16 | ⚪ cfn-nested-aws-ha-multi-az-vpc-subnets Not available  |
🏗️ Highly available multi-AZ VPC foundation with 2 public and 4 private subnets spanning multiple availability zones. Enables cross-AZ redundancy, automatic failover, and enterprise-grade resilience for mission-critical AWS workloads requiring zero-downtime deployments and disaster recovery. ❌ marked for deletion 📝 None   |
2 | 1 | 0 | 203 KB |
| 17 | ⚪ cfn-custom-resource-lambda Not available  |
🏗️ AWS CloudFormation custom resource template using a Lambda function to handle Create, Update, and Delete requests and send responses back to CloudFormation. 📝 None   |
2 | 1 | 0 | 159 KB |
| 18 | ⚪ cfn-nested-aws-glue-catalog Not available  |
🏗️ Reusable CloudFormation template that provisions an AWS Glue Data Catalog for organizing and managing metadata about datasets across your data lake. 📝 None   |
1 | 1 | 0 | 150 KB |
| 19 | ⚪ cfn-nested-aws-glue-database Not available  |
🏗️ Reusable CloudFormation template that provisions an AWS Glue database in the Data Catalog to hold tables used by ETL jobs and crawlers. 📝 None   |
1 | 1 | 0 | 150 KB |
| 20 | ⚪ cfn-nested-aws-glue-crawler Not available  |
🏗️ Reusable CloudFormation template that provisions an AWS Glue Crawler to scan data sources such as S3, discover schemas, and populate tables in the Glue Data Catalog. 📝 None   |
1 | 1 | 0 | 150 KB |
| 21 | ⚪ cfn-nested-aws-glue-etl-job Not available  |
🏗️ Nested CloudFormation template for an AWS Glue ETL job. Designed to be called from a parent stack, it provisions the job, its IAM role, and configuration as one component of a larger data pipeline. Parameters cover script location, job arguments, worker type and count, and the execution role. 📝 None   |
1 | 1 | 0 | 150 KB |
| 22 | ⚪ cfn-nested-aws-rds-cluster Not available  |
🏗️ 📌 CloudFormation nested stack for deploying AWS RDS clusters, with subnet group, security group, cluster, and instances. 📝 None   |
2 | 1 | 0 | 162 KB |
| 23 | ⚪ cfn-nested-aws-target-group Not available  |
🏗️ 📌 CFN nested AWS stack template that creates an IP-type target group for a backend service behind an internal ALB, with configurable port, health check path, and tags. 📝 None   |
2 | 1 | 0 | 163 KB |
| 24 | ⚪ cfn-nested-aws-load-balancer Not available  |
🏗️ CFN nested AWS stack template that creates an Application, Network, or Gateway Load Balancer with an optional listener, parameterized by type, scheme, subnets, security groups, and certificate. 📝 None   |
2 | 1 | 0 | 96 KB |
| 25 | 🟡 cfn-nested-aws-ecr-repository Not available  |
🏗️ Reusable CloudFormation nested stack templates for Amazon ECR repositories, with security defaults, lifecycle policies, and parameter-driven configuration. 📝 None   |
2 | 1 | 0 | 88 KB |
| 26 | ⚪ cfn-nested-aws-ssm-parameter Not available  |
🏗️ Reusable CloudFormation nested stack template for creating and managing AWS Systems Manager (SSM) Parameter Store parameters, with support for standard and secure string types and configurable parameter tiers, KMS keys, and tags. 📝 None   |
2 | 1 | 0 | 92 KB |
| 27 | ⚪ cfn-nested-aws-api-gateway-rest-api Not available  |
🏗️ Nested stack template that provisions a single Amazon API Gateway REST API resource, with configurable API name and endpoint type (regional, private, or edge). It exports the RestApi ID and root resource ID so that resource, method, and deployment stacks can attach to it from a root stack. It is designed to be instantiated once per API. 📝 None   |
1 | 0 | 0 | 82 KB |
| 28 | ⚪ cfn-nested-aws-api-gateway-resource Not available  |
🏗️ Nested stack template that creates one API Gateway path segment (AWS::ApiGateway::Resource) under a given parent, which can be the API root or another resource. Accepts the RestApi ID, parent resource ID, and path part, such as orders or {id}, and returns the new resource ID for child stacks to use. Each segment is a separate stack. 📝 None   |
1 | 0 | 0 | 82 KB |
| 29 | ⚪ cfn-nested-aws-api-gateway-method Not available  |
🏗️ Nested stack template for one API Gateway method wired to an AWS Lambda function through AWSPROXY integration. It supports configurable HTTP verb, optional Cognito or custom authorizer, and a Lambda invoke permission scoped to this method’s path, so each route is secured independently. Pass in the RestApi ID, resource ID, and function ARN. 📝 None   |
1 | 0 | 0 | 82 KB |
| 30 | ⚪ cfn-nested-aws-api-gateway-deployment-stage Not available  |
🏗️ Nested stack template that creates an API Gateway deployment and a named stage for a REST API. It configures access logging to a CloudWatch Log Group, per-method throttling limits, X-Ray tracing, and CloudWatch metrics, so each environment such as dev or prod can be tuned without changing route definitions. Pass in the RestApi ID. 📝 None   |
1 | 0 | 0 | 82 KB |
| 31 | ⚪ cfn-nested-aws-secrets-manager Not available  |
🏗️ Nested stack template for AWS Secrets Manager secrets, with KMS encryption, optional automatic rotation through a Lambda function, and resource policy settings for controlled access. It supports secret names, descriptions, and generated or user-supplied values, so teams avoid hardcoding credentials across environments and templates. 📝 None   |
1 | 1 | 0 | 82 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟢 gcp-terraform-bootstrap   |
✅ Bootstrap Google Cloud projects using Terraform with secure, keyless authentication via GitHub Actions OIDC and Workload Identity Federation, and remote state management using HCP Terraform.   |
1 | 1 | 0 | 114 KB |
| 2 | 🟢 aws-snowflake-e2e-project   |
End-to-end Snowflake data engineering project: layered stage/raw/curated design, automated ingestion + DAG, dynamic tables, Snowpark Python, GitHub Actions, and in-Snowflake visualization (Streamlit). 📝 Need to progress further with the Udemy course resource.   |
2 | 1 | 0 | 186 KB |
| 3 | 🟠 snowflake-dynamic-table-tutorial   |
Hands-on tutorial demonstrating Snowflake Dynamic Tables with incremental refresh, medallion architecture (RAW–CONFORMED–MODELED), and Terraform-driven infrastructure using modular, JSON-driven configuration. 📝 CI/CD Failing.   |
1 | 0 | 0 | 87 KB |
| 4 | ⚪ databricks-terraform-bootstrap   |
Terraform-based bootstrap for provisioning a Databricks workspace, clusters, and notebooks using Infrastructure as Code (IaC). Designed for scalable, environment-aware Databricks platform foundations with future-ready support for Unity Catalog, jobs, and CI/CD automation.   |
3 | 3 | 2 | 198 KB |
| 5 | ⚪ gcp-webhook-to-slack-function Not available  |
Provision a Google Cloud project and deploy a Python HTTP Cloud Function with Terraform + GitHub Actions. The function is invoked by a GitHub Webhook and posts event notifications to a Slack channel via Slack API.   |
3 | 3 | 2 | 166 KB |
| 6 | ⚪ snowflake-de-environment-setup Not available  |
Environment setup demo for Snowflake Data Engineering labs, including roles, warehouses, databases, schemas, and baseline utilities.   |
2 | 1 | 1 | 61 KB |
| 7 | ⚪ snowflake-de-semi-structured-json Not available  |
Demo project showcasing querying, flattening, and transforming semi-structured JSON data using Snowflake VARIANT, FLATTEN, and casting.   |
2 | 1 | 0 | 62 KB |
| 8 | ⚪ snowflake-de-iceberg-tables Not available  |
Hands-on demo for creating and querying Apache Iceberg tables in Snowflake, including metadata inspection and joins with standard tables.   |
2 | 2 | 1 | 61 KB |
| 9 | ⚪ snowflake-de-external-data-lake Not available  |
Demonstrates Snowflake data lake patterns using external stages, external tables, partitioning, views, and materialized views.   |
2 | 1 | 1 | 61 KB |
| 10 | ⚪ snowflake-de-snowpipe-ingestion Not available  |
End-to-end Snowpipe demo showing automated file ingestion from stages into Snowflake raw tables.   |
2 | 2 | 1 | 61 KB |
| 11 | ⚪ snowflake-de-json-loading Not available  |
Demo focused on loading semi-structured JSON files into Snowflake using stages, file formats, and COPY INTO.   |
2 | 1 | 1 | 61 KB |
| 12 | ⚪ snowflake-de-batch-ingestion Not available  |
Batch ingestion and ELT demo covering file loading, JSON parsing, schema detection, and merge-based transformations.   |
2 | 1 | 1 | 61 KB |
| 13 | ⚪ snowflake-de-scripting-procedures Not available  |
Snowflake Scripting demo showcasing stored procedures, loops, exception handling, and procedural ELT logic.   |
2 | 1 | 1 | 61 KB |
| 14 | ⚪ snowflake-de-udf-extensibility Not available  |
Demonstrates Snowflake extensibility features including SQL UDFs, Python UDFs, and stored procedures.   |
2 | 1 | 1 | 61 KB |
| 15 | ⚪ snowflake-de-snowpark-notebooks Not available  |
Introduction to Snowpark using notebooks, showing data processing and transformations using Snowpark APIs.   |
2 | 1 | 1 | 61 KB |
| 16 | ⚪ snowflake-de-unstructured-data Not available  |
Demo for working with unstructured data using directory-enabled stages, scoped URLs, and document processing.   |
2 | 1 | 1 | 61 KB |
| 17 | ⚪ snowflake-de-llm-functions Not available  |
Hands-on demo using Snowflake Large Language Model functions for text analysis, enrichment, and modular query design.   |
2 | 1 | 1 | 61 KB |
| 18 | ⚪ snowflake-de-unstructured-pipelines Not available  |
Pipeline automation demo combining unstructured data processing with Snowflake tasks and transformations.   |
2 | 1 | 1 | 61 KB |
| 19 | ⚪ snowflake-de-dynamic-tables Not available  |
Comprehensive demo of Snowflake Dynamic Tables including chaining, joins, refresh behavior, and downstream views.   |
2 | 2 | 1 | 61 KB |
| 20 | ⚪ snowflake-de-lakehouse-pipeline Not available  |
End-to-end Snowflake Lakehouse pipeline demo covering bronze, silver, and gold layers with ingestion and transformation.   |
2 | 1 | 1 | 61 KB |
| 21 | ⚪ snowflake-de-query-optimization Not available  |
Demo highlighting Snowflake SQL best practices for high-performance queries, pruning, joins, and aggregations.   |
2 | 1 | 1 | 61 KB |
| 22 | ⚪ snowflake-de-performance-toolkit Not available  |
Performance analysis demo using Snowflake query history, tuning metrics, and workload behavior exploration.   |
2 | 1 | 1 | 61 KB |
| 23 | ⚪ snowflake-de-performance-scenarios Not available  |
Scenario-based performance troubleshooting demo covering investigation, optimization, and validation.   |
2 | 1 | 1 | 61 KB |
| 24 | ⚪ snowflake-de-clustering-mv Not available  |
Demo showcasing table clustering strategies and materialized views for query performance optimization.   |
2 | 1 | 1 | 61 KB |
| 25 | ⚪ snowflake-de-data-unload Not available  |
Demonstrates unloading structured Snowflake data into JSON files using internal stages.   |
2 | 1 | 1 | 61 KB |
| 26 | ⚪ snowflake-de-observability-alerts Not available  |
Management and observability demo using alerts, notifications, and monitoring patterns in Snowflake.   |
2 | 1 | 1 | 61 KB |
| 27 | ⚪ snowflake-de-alerting-framework Not available  |
Advanced metadata-driven alerting framework demo using tables, alerts, tasks, and stored procedures.   |
2 | 1 | 1 | 61 KB |
| 28 | ⚪ snowflake-de-data-metrics Not available  |
Demo for creating and using Data Metric Functions (DMFs) to measure data quality and monitor datasets.   |
2 | 2 | 1 | 61 KB |
| 29 | ⚪ snowflake-de-azure-iceberg-tables   |
Terraform-based reference implementation for building Snowflake Data Engineering workloads on Azure using external Iceberg tables, Azure Blob Storage, and modular CI/CD pipelines with GitHub Actions.   |
1 | 1 | 0 | 125 KB |
| 30 | ⚪ terraform-gcp-lab-01-gce Not available  |
This repository is part of a hands-on Terraform learning series for Google Cloud Platform (GCP). Lab 01 focuses on provisioning and managing Google Compute Engine (GCE) virtual machines using Terraform, following infrastructure-as-code (IaC) best practices.   |
3 | 2 | 1 | 274 KB |
| 31 | ⚪ snowflake-de-dynamic-table-basic Not available  |
🎯Dynamic Table Lab 1: Implement Basic Dynamic Table with Incremental Refresh   |
2 | 1 | 0 | 60 KB |
| 32 | ⚪ snowflake-de-basic-snowpipe Not available  |
Terraform-first implementation of Snowflake Basic Snowpipe, demonstrating infrastructure provisioning via external modules and JSON-driven configuration. Focuses on basic pipes (manual refresh) with COPY INTO, stage, file format, table, and ingestion validation workflows.   |
2 | 1 | 0 | 113 KB |
| 33 | 🟡 snowflake-dynamic-table-pipeline Not available  |
🎯 End-to-end Snowflake Dynamic Table pipeline showcasing automated ingestion, transformation, and incremental refresh using dynamic tables, streams, and tasks. Built with a Terraform-first, JSON-driven modular architecture for scalable medallion (RAW → CONFORMED → MODELED) data engineering workflows.   |
2 | 1 | 0 | 25 KB |
| 34 | ⚪ snowflake-iceberg-table-tutorial Not available  |
🎯 Hands-on tutorial repository demonstrating how to create and manage Snowflake Iceberg Tables using modern data lakehouse patterns, including external storage integration, metadata management, and Terraform-driven infrastructure.   |
3 | 0 | 0 | 185 KB |
| 35 | 🟡 snowflake-external-table-csv-tutorial Not available  |
🎯 This repository provides a step-by-step guide to implementing Snowflake External Tables on CSV files, covering external stage setup, file formats, schema mapping, metadata refresh, and query optimization using a Terraform-first, modular, and lakehouse-aligned architecture for scalable data engineering. 📝 S3 bucket,Database, Schama, File Format and External Stage created.   |
2 | 0 | 0 | 209 KB |
| 36 | 🟡 snowflake-external-table-json-tutorial Not available  |
🎯 This tutorial demonstrates how to implement Snowflake External Tables on semi-structured JSON data, including stage setup, file formats, schema inference, partitioning options, and query optimization using a Terraform-first, modular, and lakehouse-aligned architecture for scalable data engineering workflows. 📝 Ready to start working on this repo.   |
2 | 0 | 0 | 209 KB |
| 37 | ⚪ snowflake-external-table-partition-tutorial Not available  |
🎯 Hands-on tutorial repository demonstrating how to create and manage Snowflake Iceberg Tables using modern data lakehouse patterns, including external storage integration, metadata management, and Terraform-driven infrastructure.   |
2 | 0 | 0 | 209 KB |
| 38 | ⚪ snowflake-external-table-parquet-tutorial Not available  |
🎯 This repository provides a step-by-step guide to implementing Snowflake External Tables on Parquet files, covering external stage setup, file formats, schema mapping, metadata refresh, and query optimization using a Terraform-first, modular, and lakehouse-aligned architecture for scalable data engineering.   |
2 | 0 | 0 | 29 KB |
| 39 | ⚪ snowflake-snowpipe-dynamic-table-pipeline Not available  |
🎯 End-to-end Snowflake data pipeline using External Stage and Snowpipe for automated ingestion across a four-layer architecture (Staging → RAW → CLEAN → CONSUMPTION), leveraging Dynamic Tables for declarative transformations and streamlined, near real-time data flow. 📝 This is the pipeline of DE Simplified Dynamic Table masterclass - section 5   |
2 | 0 | 0 | 35 KB |
| 40 | ⚪ snowflake-dynamic-tables-declarative-pipelines Not available  |
Advanced implementation of declarative data pipelines in Snowflake using Dynamic Tables, covering chained transformations, autonomous refresh orchestration, cost optimization with dual warehouses, and enterprise-grade design patterns.   |
2 | 1 | 0 | 29 KB |
| 41 | 🟡 terraform-gcs-bucket-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud Storage bucket on GCP with configurable storage class, regional and multi-regional placement, IAM access control, customer-managed encryption, object versioning, retention policies, and automated lifecycle management rules. 📝 Basic and Lifecycle enabled. Need to create others.   |
2 | 1 | 0 | 56 KB |
| 42 | 🟡 terraform-pubsub-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud Pub/Sub topic and subscription with configurable message retention policies, acknowledgment deadlines, dead-letter queue support, IAM access control, message filtering, ordering keys, push and pull subscription delivery options, retry policies, and topic-level encryption using KMS keys.   |
2 | 1 | 0 | 46 KB |
| 43 | 🟡 terraform-bigtable-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud Bigtable instance, clusters, and tables on GCP with configurable node scaling, SSD and HDD storage types, multi-cluster replication, IAM access control, app profiles, routing policies, column families, and garbage collection policies for high-throughput wide-column and time-series workloads.   |
2 | 2 | 1 | 45 KB |
| 44 | 🟡 terraform-bigquery-demo Not available  |
🏗️ ⌾Terraform demo project provisioning a Google Cloud BigQuery dataset and tables on GCP with configurable access controls, time and range partitioning, column clustering, schema management, customer-managed encryption keys, dataset-level IAM bindings, authorized views, and automated table expiration policies for scalable analytics workloads.   |
2 | 2 | 1 | 45 KB |
| 45 | 🟡 terraform-gce-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Compute Engine instance on GCP with configurable machine type, disk type and size, custom metadata, startup scripts, network tags, IAM service account bindings, firewall rules, SSH access controls, static IP reservation, and automated snapshot scheduling for scalable and secure VM workloads.   |
2 | 2 | 1 | 45 KB |
| 46 | 🟡 terraform-cloud-function-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud Function on GCP with configurable runtime, memory and timeout settings, environment variables, IAM invoker bindings, event-driven and HTTP triggers, source bucket deployment, VPC connector integration, and secret manager references for serverless workloads.   |
2 | 2 | 1 | 45 KB |
| 47 | 🟡 terraform-cloud-sql-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud SQL instance on GCP with configurable database engine, tier and edition, high availability, automated backups, point-in-time recovery, private IP and VPC peering, IAM database authentication, SSL enforcement, and maintenance window settings for managed relational workloads.   |
2 | 2 | 1 | 45 KB |
| 48 | 🟡 terraform-cloud-spanner-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud Spanner instance and database on GCP with configurable processing units, multi-region and single-region configurations, IAM access control, schema definitions, backup schedules, retention policies, and query optimizer settings for globally distributed relational workloads.   |
2 | 2 | 1 | 45 KB |
| 49 | 🟡 terraform-cloud-datastore-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud Datastore database on GCP with configurable native and datastore modes, multi-region and single-region locations, IAM access control, collection and document structure, TTL policies, backup schedules, and field-level index configurations for serverless NoSQL workloads.   |
2 | 2 | 1 | 45 KB |
| 50 | 🟡 terraform-cloud-firestore-demo Not available  |
🏗️ ⌾Terraform demo project provisioning a Google Cloud Firestore database on GCP with configurable native and datastore modes, multi-region and single-region locations, IAM access control, document and collection structure, TTL policies, automated backup schedules, and composite index configurations for scalable serverless NoSQL workloads.   |
2 | 2 | 1 | 45 KB |
| 51 | 🟡 terraform-dataflow-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud Dataflow job on GCP with configurable streaming and batch pipelines, worker machine type, autoscaling, custom parameters, temp and staging bucket settings, IAM service account bindings, network and subnetwork configuration, and Flex Template support for managed data processing workloads.   |
2 | 2 | 1 | 45 KB |
| 52 | 🟡 terraform-alloydb-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud AlloyDB cluster and instance on GCP with configurable primary and read pool instances, automated backups, point-in-time recovery, private IP and VPC peering, IAM authentication, SSL enforcement, maintenance windows, and high availability settings for PostgreSQL-compatible workloads.   |
2 | 2 | 1 | 45 KB |
| 53 | 🟡 terraform-dataproc-demo Not available  |
🏗️⌾Terraform demo project provisioning a Google Cloud Dataproc cluster on GCP with configurable master and worker node types, autoscaling policies, initialization actions, custom metadata, Kerberos security, IAM service account bindings, staging bucket settings, and optional Spark and Hadoop component configuration for managed data processing work   |
2 | 2 | 1 | 45 KB |
| 54 | 🟡 terraform-vpc-subnet-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud VPC network and subnets on GCP with configurable primary and secondary IP ranges, private Google access, flow logs, firewall rules, Cloud NAT, shared VPC, VPC peering, IAM bindings, and subnet-level access controls for scalable and secure network infrastructure workloads.   |
2 | 2 | 1 | 45 KB |
| 55 | 🟡 terraform-kms-demo Not available  |
🏗️ ⌾ Terraform demo project provisioning a Google Cloud KMS key ring and crypto keys on GCP with configurable key rotation periods, protection levels, encryption algorithms, IAM access control, automatic and manual key rotation, import jobs, crypto key versions, and destroy scheduled duration for secure key management workloads.   |
2 | 2 | 1 | 45 KB |
| 56 | 🟡 terraform-compute-mig-demo Not available  |
🏗️⌾Terraform demo project provisioning a Google Cloud Managed Instance Group on GCP with configurable instance templates, autoscaling policies, health checks, rolling update strategies, named ports, stateful disks, IAM service account bindings, multi-zone distribution, and load balancer integration for scalable and resilient compute workloads.   |
2 | 2 | 1 | 45 KB |
| 57 | 🟡 terraform-iam-demo Not available  |
🏗️ ⌾Terraform demo project provisioning Google Cloud IAM resources on GCP with service accounts, project IAM bindings, custom roles, IAM conditions, workload identity federation, service account impersonation, audit logging, organisation policy constraints, and IAM deny policies for secure access control.   |
2 | 2 | 1 | 45 KB |
| 58 | ⚪ customer360-snowflake-pipeline   |
✅ End-to-end Snowflake data lake for a fictional retail bank — ingests 25,000 nested JSON customer records through a RAW → SILVER → GOLD pipeline, builds fact and dimension tables, and surfaces a Customer 360 & risk analytics dashboard via Streamlit in Snowflake.   |
1 | 1 | 0 | 491 KB |
| 59 | ⚪ snowflake-streams-tasks-etl Not available  |
🏗️ End-to-end Snowflake ETL pipeline using Streams and Tasks to automate customer and order data flow through a medallion architecture (Source → Raw → Clean → Consumption). Streams capture incremental changes while Tasks orchestrate the load, producing customer, date, and priority dimension tables along with an order fact table for analytics.   |
2 | 1 | 0 | 65 KB |
| 60 | ⚪ snowflake-etl-dynamic-tables Not available  |
🏗️ End-to-end Snowflake ETL pipeline using Dynamic Tables to automate customer and order data flow through a medallion architecture (Source → Raw → Clean → Consumption). A COPY task loads data from the internal stage to the raw layer, while Dynamic Tables handle the clean and consumption layers with declarative, lag-based refresh.   |
2 | 1 | 0 | 65 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟢 branch-issue-action   |
✅ Composite GitHub Action for enforcing issue-based branch naming conventions. Extracts and validates issue numbers from branch names (format: type/PROJECT-seq.issue-slug), checks API for issue existence, and prevents code pushes from branches created directly in the UI. 📝 Fix Release status, Tag and CODEOWNERS   |
2 | 1 | 1 | 932 KB |
| 2 | 🔵 tf-lint-action   |
✅ A reusable GitHub Composite Action for linting Terraform configurations using TFLint. Supports version control via organization variables, plugin caching, multiple output formats (default, compact, json, checkstyle), and multi-cloud infrastructure setups. Logs results to GitHub Actions Summary and fails the workflow on lint issues 📝 Need to Upgrade   |
2 | 1 | 1 | 1018 KB |
| 3 | 🔵 tf-plan-action   |
✅GitHub Composite Action for running Terraform plan operations across multiple backends and cloud providers. Supports S3 and HCP Terraform Cloud backends with built-in OIDC authentication for AWS, GCP, Azure, Snowflake, and Databricks. Includes platform mode for multi-cloud infrastructure, artifact management, and GitHub Actions Summary integration 📝 Need to Upgrade   |
2 | 1 | 1 | 568 KB |
| 4 | 🔵 tf-apply-action   |
✅ GitHub composite action orchestrating terraform apply with multi-cloud support (AWS, Azure, GCP, Snowflake, Databricks), configurable backends (S3/HCP Terraform Cloud), platform mode for simultaneous multi-provider deployments, and built-in OIDC authentication. 📝 Need to upgrade   |
3 | 2 | 1 | 350 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟢 checkov-report-action   |
✅ GitHub JavaScript Action - Print Checkov Scan Report   |
1 | 0 | 0 | 468 KB |
| 2 | 🟢 upload-s3-action   |
GitHub JavaScript Action - Upload S3 Object   |
2 | 0 | 0 | 5 KB |
| 3 | 🟡 terraform-plugin-action Not available  |
GitHub Composite Action - Install and cache Terraform plugin   |
2 | 2 | 0 | 8 KB |
| 4 | 🟢 checkov-scan-action   |
GitHub Composite Action - Checkov Scan   |
2 | 1 | 1 | 309 KB |
| 5 | 🟢 tf-validate-action   |
✅ GitHub Composite Action - Terraform Format Check and Validation.   |
2 | 1 | 1 | 687 KB |
| 6 | 🟢 tf-destroy-action   |
GitHub Composite Action - Terraform Destroy.   |
3 | 1 | 1 | 147 KB |
| 7 | 🟡 infracost-action   |
GitHub Composite Action - Infra Cost   |
5 | 4 | 4 | 361 KB |
| 8 | 🟡 terraform-apply-wf Not available  |
GitHub Reusable Workflow to create a stack using Terraform Apply   |
4 | 2 | 2 | 549 KB |
| 9 | 🟢 tf-destroy-wf   |
GitHub Reusable Workflow to tear down a stack using Terraform Destroy   |
2 | 1 | 1 | 441 KB |
| 10 | 🟡 tf-drift-detection-wf Not available  |
GitHub Reusable Workflow to for Drift Detection of a Terraform Stack   |
4 | 3 | 2 | 600 KB |
| 11 | 🟢 tf-yor-action   |
✅GitHub Composite Action that automatically tags Terraform files with Yor Git metadata including author, commit SHA, and timestamp. Supports custom terraform directory paths, release tag checkout, and optional auto-commit of changes back to the repository.   |
2 | 2 | 1 | 572 KB |
| 12 | 🟢 tf-ci-reusable-wf   |
✅ Reusable GitHub Actions workflow for multi-cloud Terraform CI across AWS, GCP, Azure, Snowflake, and Databricks. Automates linting, validation, and planning with multi-backend support (S3/HCP TFC), cloud-native authentication, and platform mode for automatic provider detection.   |
2 | 1 | 1 | 414 KB |
| 13 | 🟢 tf-release-wf Not available  |
GitHub Reusable Workflow: Terraform Release   |
2 | 1 | 1 | 331 KB |
| 14 | 🟡 cfn-yor-action   |
GitHub Composite Action - Add Git metadata tags to CloudFormation Template   |
4 | 2 | 2 | 660 KB |
| 15 | 🟡 cfn-release-wf Not available  |
GitHub Reusable Workflow: Release workflow for Cloudformation   |
4 | 3 | 2 | 642 KB |
| 16 | 🟡 setup-multi-cloud-environments-wf   |
GitHub Reusable Workflow to bootstrap Multi Cloud Environments for (AWS, GCP and Azure). This version only supports one environment (devl). In future I have plans to support development, test and productions   |
3 | 2 | 1 | 507 KB |
| 17 | 🟢 tf-deploy-multi-reusable-wf   |
✅ Terraform Multi-Cloud Deploy Workflow: Reusable GitHub Actions for AWS, GCP, Azure, Snowflake, and Databricks deployments. Complete pipeline (TFLint → Validate → Plan → Apply), platform mode for automatic multi-cloud detection, S3/HCP TFC backend support, OIDC authentication, and concurrency control.   |
3 | 1 | 1 | 988 KB |
| 18 | 🟢 run-ansible-playbook-wf   |
✅ Reusable GitHub Actions workflow for Ansible automation with built-in GitHub OIDC support for keyless, secure access to AWS, GCP, and Azure. Automates multi-cloud infrastructure provisioning without managing credentials, streamlines CI/CD pipelines with federated identity, and maintains audit-ready access logs.   |
3 | 2 | 1 | 454 KB |
| 19 | 🟡 multicloud-snowflake-stages-wf Not available  |
Provision Snowflake external stages across AWS S3, Google Cloud Storage, and Azure Blob using a single reusable GitHub workflow with Terraform + secure cloud identity (OIDC) and Snowflake key-pair auth.   |
3 | 2 | 1 | 751 KB |
| 20 | 🟡 checkov-custom-policies Not available  |
🏗️ A centralized repository for reusable custom Checkov policies, metadata-driven service-to-scan mappings, Terraform module detection logic, pass/fail test cases, and GitHub Actions automation. It enables consistent, scalable, and organization-wide IaC governance across Terraform repositories and cloud services. 📝 Initial build successful   |
3 | 2 | 1 | 823 KB |
| 21 | 🟡 terraform-checkov-scan-detector   |
🏗️ GitHub Action to scan Terraform configurations, detect which cloud services and modules are used, and dynamically determine the relevant Checkov custom policy folders, built-in checks, custom checks, and skip rules to execute.   |
3 | 2 | 1 | 610 KB |
| 22 | 🟡 gcp-project-onboarding Not available  |
🏗️ Reusable GitHub Actions workflow for standardised GCP project onboarding. Provisions HCP Terraform workspaces, GitHub Environments with GCP project variables, environment-tier deployment approval gates, and repository branch protection — all configured from a single project-config.json file per application repo.   |
3 | 2 | 1 | 156 KB |
| 23 | 🟡 aws-project-onboarding   |
✅ Reusable GitHub Actions workflow for standardized AWS project onboarding. Provisions HCP Terraform workspaces, GitHub Environments with AWS account variables, environment-tier deployment approval gates, and repository branch protection — all configured from a single project-config.json file per application repo. 📝 Ready to release   |
2 | 1 | 1 | 604 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟢 github-action-template   |
✅ Starter template repository for building GitHub Composite Actions. Includes standardized project structure, action.yaml configuration, shell scripts, comprehensive documentation, and CI/CD workflows. Accelerates composite action development with pre-built scaffolding, examples, and best practices. Streamlines creation of reusable GitHub Actions. 📝 Standardize the repository   |
3 | 2 | 1 | 412 KB |
| 2 | 🟢 create-branch-action   |
✅ GitHub Composite Action that automates feature branch creation from issues. Automatically generates standardized branch names based on issue details, validates branch uniqueness, and creates branches with predefined naming conventions. Streamlines development workflow initialization and reduces manual branch management overhead. 📝 repository standardized   |
1 | 0 | 0 | 203 KB |
| 3 | 🟢 setup-aws-environments-wf   |
✅ Reusable GitHub Actions workflows for automated, configuration-driven AWS environment bootstrapping with dynamic environment management, branch protection rules, and AI-powered context for seamless multi-account AWS infrastructure provisioning. 📝 repository standardized   |
1 | 0 | 0 | 194 KB |
| 4 | 🟢 check-environments-action   |
✅ GitHub JavaScript Action that retrieves and lists all available GitHub environments for a repository. Queries environment metadata including protection rules, deployment branches, and reviewer requirements. Enables dynamic workflow decisions based on environment availability. 📝 repository standardized   |
6 | 5 | 5 | 1.24 MB |
| 5 | 🟢 create-release-action   |
✅ Composite GitHub Action automating timestamped release tags and draft releases. Generates sequential tags (Rel--YYYYMMDDHHMMSS), auto-generates changelogs from commits, and supports attaching release assets. Ideal for teams needing streamlined, auditable release management. 📝 repository standardized   |
1 | 0 | 0 | 448 KB |
| 6 | 🟢 slack-notification-wf   |
✅ Reusable GitHub Actions workflow that sends formatted Slack notifications to a channel via webhook when new issues or pull requests are created. Automatically formats messages based on event type for seamless team communication and issue tracking integration. 📝 repository standardized   |
1 | 0 | 0 | 400 KB |
| 7 | 🟢 cfn-lint-action   |
✅ GitHub Composite Action automating CloudFormation template linting and validation. Uses cfn-lint to detect syntax errors, logical issues, and CloudFormation best practice violations. Generates comprehensive reports with error locations, severity levels, and actionable fixes. 📝 repository standardized   |
1 | 0 | 0 | 589 KB |
| 8 | 🟢 cfn-validate-action   |
✅ Reusable GitHub Composite Action for validating AWS CloudFormation templates in CI/CD pipelines. Checks template syntax with the AWS CLI and lints with cfn-lint to catch invalid resources, properties, and best-practice issues early. Drop it into any workflow to stop broken stacks before they reach deployment. 📝 repository standardized   |
1 | 0 | 0 | 448 KB |
| 9 | 🟢 cfn-deploy-action   |
✅ GitHub reusable action for CloudFormation stack deployments with built-in OIDC authentication, template versioning via S3, changeset validation, and automated step summary output with stack outputs and resources. 📝 repository standardized   |
1 | 0 | 0 | 119 KB |
| 10 | 🟢 cfn-deploy-wf   |
✅ A reusable GitHub Actions workflow for deploying AWS CloudFormation stacks with validation, linting, and safety checks. Standardizes IaC deployment pipelines across repositories. 📝 repository standardized   |
2 | 1 | 1 | 308 KB |
| 11 | 🟢 cfn-delete-action   |
✅ GitHub Composite Action for automated CloudFormation stack deletion. Streamline AWS infrastructure cleanup by safely removing CloudFormation stacks from your CI/CD pipelines. Features customizable parameters, error handling, and seamless GitHub Actions integration for efficient infrastructure lifecycle management and stack teardown automation. 📝 repository standardized   |
1 | 0 | 0 | 96 KB |
| 12 | 🟢 cfn-delete-wf   |
✅ A reusable GitHub Actions workflow for secure CloudFormation stack deletion with validation gates, safety checks, and audit trails. Standardizes IaC deprovisioning workflows across teams and repositories. 📝 repository standardized   |
1 | 0 | 0 | 98 KB |
| 13 | 🟢 cfn-ci-build-reusable-wf   |
✅ Reusable GitHub Actions workflow for building, validating, and testing CloudFormation templates as part of enterprise CI/CD pipelines. Automates template syntax checking, parameter validation, linting, and pre-deployment verification with comprehensive error handling and reporting. 📝 repository standardized   |
1 | 0 | 0 | 38 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | ⚪ terraform-gcp-practice Not available  |
Terraform with GCP practice   |
4 | 3 | 3 | 219 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟡 cloud-champion-team-challenge Not available  |
🎯 Cloud Champion Bootcamp Team Challenge project by Team Cloud Catalyst demonstrating a Snowflake-based data pipeline that ingests and analyzes the U.S. Public School Characteristics 2022–23 dataset from Data.gov.   |
4 | 3 | 2 | 327 KB |
| # | Repository | Description | |
|
|
|
|---|---|---|---|---|---|---|
| 1 | 🟡 terraform-google-gcs-bucket Not available  |
🏗️ Terraform module to provision and manage Cloud Storage buckets, lifecycle rules, versioning, retention policies, encryption, and IAM access. 📝 Initial build successful   |
7 | 6 | 5 | 345 KB |
| 2 | 🟡 terraform-google-dataflow Not available  |
🏗️ Terraform module to deploy and manage Dataflow jobs, templates, staging configuration, worker settings, and service accounts. 📝 Initial build successful   |
7 | 6 | 5 | 314 KB |
| 3 | 🟡 terraform-google-vpc Not available  |
🏗️ Terraform module to create and manage VPC networks, subnets, routes, firewall rules, private service access, and related networking components. 📝 Initial release successful   |
7 | 6 | 5 | 308 KB |
| 4 | 🟡 terraform-google-cloud-sql-instance Not available  |
🏗️ Terraform module to provision and manage Cloud SQL instances, including engine configuration, HA, backups, networking, and security settings. 📝 Initial build successful   |
7 | 6 | 5 | 339 KB |
| 5 | 🟡 terraform-google-bigtable-instance Not available  |
🏗️ Terraform module to provision Bigtable instances, clusters, autoscaling, storage configuration, and IAM settings. 📝 Initial build successful   |
7 | 6 | 5 | 329 KB |
| 6 | 🟡 terraform-google-bigtable-table Not available  |
🏗️ Terraform module to create and manage Bigtable tables, including column families, GC policies, and application-level schema design. 📝 Initial build successful   |
7 | 6 | 5 | 315 KB |
| 7 | 🟡 terraform-google-bigquery-dataset Not available  |
🏗️ Terraform module to manage BigQuery datasets, including location, access controls, IAM policies, and data governance settings. 📝 Initial build successful   |
7 | 6 | 5 | 305 KB |
| 8 | 🟡 terraform-google-kms Not available  |
🏗️ Terraform module to manage KMS key rings, crypto keys, IAM bindings, rotation schedules, and encryption policies. 📝 Initial build successful   |
7 | 6 | 5 | 314 KB |
| 9 | 🟡 terraform-google-dataproc-cluster Not available  |
🏗️ Terraform module to create and manage Dataproc clusters, batches (serverless), workflow templates, autoscaling policies, and job execution. 📝 Initial build successful   |
7 | 6 | 5 | 313 KB |
| 10 | 🟡 terraform-google-pubsub-topic Not available  |
🏗️ Terraform module to provision Pub/Sub topics, including message retention, ordering, schema integration, and encryption settings. 📝 Initial build successful   |
7 | 6 | 5 | 306 KB |
| 11 | 🟡 terraform-google-pubsub-subscription Not available  |
🏗️ Terraform module to create and manage Pub/Sub subscriptions, including push/pull delivery, dead-letter topics, retry policies, and filtering. 📝 Initial build successful   |
7 | 6 | 5 | 308 KB |
| 12 | 🟡 terraform-google-compute-instance Not available  |
🏗️ Terraform module to create and manage standalone Compute Engine VM instances, including disks, networking, service accounts, and metadata. 📝 Initial build successful   |
7 | 6 | 5 | 307 KB |
| 13 | 🟢 terraform-snowflake-dynamic-table   |
✅ Terraform module to manage Snowflake dynamic table. 📝 Working as expected.   |
5 | 4 | 4 | 251 KB |
| 14 | 🟢 terraform-snowflake-module-template   |
✅ Terraform Snowflake module GitHub repository template   |
9 | 8 | 8 | 511 KB |
| 15 | 🟢 terraform-snowflake-storage-integration   |
✅ Terraform module to manage Snowflake storage integration. 📝 Working as expected.   |
5 | 4 | 4 | 287 KB |
| 16 | 🟢 terraform-snowflake-pipe   |
✅ Terraform module to manage Snowflake pipe. 📝 Working as expected.   |
5 | 4 | 4 | 264 KB |
| 17 | 🟡 terraform-snowflake-task   |
✅ Terraform module to manage Snowflake task.   |
5 | 3 | 3 | 202 KB |
| 18 | 🟢 terraform-aws-s3   |
✅ Terraform AWS Module for S3 Bucket   |
5 | 4 | 4 | 336 KB |
| 19 | 🟢 terraform-aws-module-template   |
✅ A GitHub template repository for bootstrapping reusable Terraform AWS modules. Provides a standardized layout with submodules, examples, Terratest integration tests, CI workflows using OIDC, semantic-release, and Conventional Commits — so new AWS modules start with consistent structure, validation, and release automation.   |
8 | 7 | 7 | 637 KB |
| 20 | 🟢 terraform-aws-iam   |
✅ A reusable Terraform module for provisioning and managing AWS IAM resources, including users, groups, roles, policies, and instance profiles. Designed to simplify identity and access management with flexible, configurable inputs and follow least-privilege best practices across AWS environments. 📝 Working as expected   |
9 | 8 | 8 | 433 KB |
| 21 | 🟢 terraform-snowflake-seed-data   |
✅ Terraform Snowflake module to execute controlled SQL (INSERT, UPDATE, MERGE) for demo, seed, and reference data initialization. 📝 Working as expected.   |
4 | 3 | 3 | 282 KB |
| 22 | 🟢 terraform-aws-glue-database Not available  |
🎯 Reusable Terraform module to create and manage AWS Glue Data Catalog databases, providing a standardized foundation for data lake metadata used by Athena, Glue Crawlers, Iceberg tables, and analytics workloads. 📝 Ready for merge   |
5 | 4 | 3 | 308 KB |
| 23 | 🟡 terraform-aws-glue-catalog-table Not available  |
🎯 Terraform module to create and manage AWS Glue Data Catalog tables, supporting external tables and Apache Iceberg tables on Amazon S3 for analytics engines like Athena, Spark, and EMR in modern data lake and lakehouse architectures. 📝 Ready for merge to main   |
7 | 6 | 5 | 309 KB |
| 24 | 🟢 terraform-google-project-hierarchy   |
✅ Terraform module for managing GCP organization folder and project hierarchies with billing and service enablement.   |
8 | 7 | 6 | 413 KB |
| 25 | 🟢 terraform-google-module-template   |
✅ A reusable, opinionated Terraform module template for provisioning and managing Google Cloud Platform resources — designed for consistency, scalability, and best practices.   |
6 | 5 | 5 | 414 KB |
| 26 | ⚪ terraform-snowflake-external-volume Not available  |
Terraform module to manage Snowflake external volume.   |
4 | 3 | 3 | 132 KB |
| 27 | ⚪ terraform-snowflake-stream   |
🎯 Terraform module to manage Snowflake stream. 📝 Need to start working on this repository.   |
4 | 3 | 3 | 287 KB |
| 28 | ⚪ terraform-aws-cloudwatch Not available  |
🎯 Reusable Terraform modules for provisioning and managing AWS CloudWatch resources, including log groups, metric filters, alarms, dashboards, and log subscriptions for centralized monitoring and observability.   |
7 | 6 | 5 | 287 KB |
| 29 | 🟡 terraform-google-spanner-instance Not available  |
🏗️ Terraform module to provision and manage Google Cloud Spanner instances with configurable capacity, regional settings, and enterprise-grade controls. 📝 Working on Claude SKILL   |
7 | 6 | 5 | 271 KB |
| 30 | 🟡 terraform-google-spanner-database Not available  |
🏗️ Terraform module to create and manage databases within Google Cloud Spanner instances, including schema (DDL), IAM, and lifecycle controls. 📝 Working on Claude SKILL   |
7 | 6 | 5 | 271 KB |
| 31 | 🟡 terraform-google-cloud-sql-database Not available  |
🏗️ Terraform module to create and manage databases within Cloud SQL instances, including schema initialization and lifecycle controls. 📝 Working on Claude SKILL   |
7 | 6 | 5 | 271 KB |
| 32 | 🟡 terraform-google-alloydb-cluster Not available  |
🏗️ Terraform module to provision and manage AlloyDB clusters, including networking, backups, encryption, and foundational configuration. 📝 Working on Claude SKILL   |
7 | 6 | 5 | 271 KB |
| 33 | 🟡 terraform-google-alloydb-instance Not available  |
🏗️ Terraform module to create and manage AlloyDB instances (primary and read pool) within a cluster, including compute sizing and scaling. 📝 Working on Claude SKILL   |
7 | 6 | 5 | 271 KB |
| 34 | 🟡 terraform-google-firestore Not available  |
🏗️ Terraform module to configure Firestore databases, indexes, field settings, and related IAM controls. 📝 Working on Claude SKILL   |
7 | 6 | 5 | 306 KB |
| 35 | 🟡 terraform-google-datastore Not available  |
🏗️ Terraform module to manage Datastore-mode database configuration, indexes, and access controls. 📝 Working on Claude SKILL   |
7 | 6 | 5 | 271 KB |
| 36 | 🟡 terraform-google-compute-mig Not available  |
🏗️ Terraform module to create and manage Managed Instance Groups (MIGs), including instance templates, autoscaling, rolling updates, and health checks. 📝 Working on Claude SKILL   |
7 | 6 | 5 | 314 KB |
| 37 | ⚪ terraform-aws-security-group Not available  |
🏗️ A reusable Terraform module for provisioning and managing AWS security groups and their ingress/egress rules. Designed to simplify network access control with flexible, configurable inputs and support for cross-referencing security groups, following least-privilege best practices across AWS environments.   |
10 | 9 | 8 | 352 KB |
| 38 | ⚪ terraform-aws-glue Not available  |
🏗️ Terraform module to create and manage AWS Glue resources, including Data Catalog databases, crawlers, catalog tables, and Glue Jobs for scalable ETL workflows, automated schema discovery, metadata management, and serverless data processing across S3, relational databases, and other supported data sources.   |
8 | 7 | 7 | 235 KB |
| 39 | ⚪ terraform-aws-ec2-instance Not available  |
🏗️ A flexible Terraform module for provisioning AWS EC2 instances with support for custom AMIs, configurable instance types, EBS volumes, security groups, IAM instance profiles, user data scripts, and consistent tagging. Includes multiple ready-to-use examples, input validation, native Terraform tests, and GitHub Actions CI workflows.   |
9 | 8 | 7 | 235 KB |
| 40 | ⚪ terraform-aws-dynamodb Not available  |
🏗️ Terraform module for provisioning and managing AWS DynamoDB tables with support for on-demand and provisioned billing modes, global secondary indexes, local secondary indexes, auto-scaling, point-in-time recovery, encryption at rest, TTL, streams, and global tables. Production-ready, configurable, and follows AWS best practices.   |
2 | 1 | 0 | 45 KB |
| 41 | ⚪ terraform-snowflake-api-integration Not available  |
🏗️ Reusable Terraform module for creating and managing Snowflake API integrations using infrastructure as code.   |
10 | 9 | 8 | 438 KB |
| 42 | 🟢 terraform-snowflake-warehouse   |
✅ Terraform module to manage Snowflake warehouses with configurable sizing, scaling, auto-suspend, and cost controls. 📝 Working as expected.   |
5 | 4 | 4 | 394 KB |
| 43 | 🟢 terraform-snowflake-database-schema   |
✅ Terraform module to create and manage Snowflake databases and schemas using infrastructure as code. 📝 Working as expected.   |
5 | 4 | 4 | 277 KB |
| 44 | 🟢 terraform-snowflake-file-format   |
✅ Terraform module to manage Snowflake file format (CSV / JSON / Parquet) 📝 Working as expected.   |
5 | 4 | 4 | 255 KB |
| 45 | 🟢 terraform-snowflake-stage   |
✅ Terraform module to manage Snowflake internal and external stage. 📝 Working as expected.   |
5 | 4 | 4 | 263 KB |
| 46 | 🟢 terraform-snowflake-table   |
✅ Terraform module to manage Snowflake table. 📝 Working as expected.   |
5 | 4 | 4 | 278 KB |
Visit my blog for articles on AWS architecture, Terraform, GitHub Actions, IAM, and cloud observability.
Last generated: 2026-11-13 20:05:27 EST
Total repositories: 255
