Private access in a VPC: designing for services that should not be public
Notes from building a private-access lab: subnet boundaries, routing intent, and the practical questions that make an architecture safer to operate.
Read project notes →ALEJANDRO SALAZAR · PORTFOLIO & BLOG
TECH STACK
VERIFIED LEARNING
Selected certifications verified through Credly.
02 / FIELD NOTES
Notes from building a private-access lab: subnet boundaries, routing intent, and the practical questions that make an architecture safer to operate.
Read project notes →A short checklist for inputs, outputs, naming, and the operational story around the code.
Choosing boring, maintainable hosting for a developer portfolio.
01 / BUILT IN PUBLIC
Real work, concise context.
A secure portfolio and field-notes platform built with Terraform, private S3 hosting, CloudFront, Route 53, and an authenticated publishing workflow.
A production-minded assistant project built around log datasets, incident postmortems, and labeled debugging cases.
A security-first DevSecOps delivery pipeline: Terraform-defined AWS/EKS foundations, a hardened FastAPI workload proven locally with Kubernetes, and a staged path to secure delivery, runtime detection, and GitOps.
A hands-on infrastructure lab focused on keeping service traffic private and making the network intent visible in code.
03 / ABOUT THIS SPACE
This is not a feed. It is a small, searchable record of how I think through cloud systems, backend services, and automation—what I chose, what I would change, and why.