PROJECT / SECURE DELIVERY
Building a Secure EKS Delivery Lab
A practical DevSecOps project exploring how an application moves from infrastructure code to a monitored workload on Amazon EKS.
What I’m building
The lab starts with a cost-conscious AWS foundation provisioned with Terraform, then layers in EKS, container delivery, and runtime security.
- Private VPC networking and IAM foundations
- Immutable ECR images with scan-on-push
- GitHub Actions delivery gates with Trivy
- Falco runtime detection on EKS
- Helm packaging and a later Argo CD GitOps phase
Current status
The project is being built in stages. I’m validating the manual deployment path first, while keeping the design portable enough to test locally with Kubernetes before incurring additional EKS costs.