my recent CLOUD projects

On this page i am going to show some projects that i have been part of since 2019. Of course i am not allowed to make any kind of detailed information on these projects. If you like to know my technical skills please refer to my skill page. The only detailed information I can give you is how i run this page you are reading now. So here are some projects i have been working on.

https://www.klimafolgenonline.com

This project is run by the “Potsdamer Institut für Kimaforschung” and gives an overview of climate change forecasts in Germany. The application was run on webservers in our datacenter and my job was to transition this to AWS including redundancy-, autoscaling-, webserving- and monitoring aspects. By transferring the solution to AWS i was also able to introduce firewalling and TLS certificates. To safe on cost we made use an mixed instance fleed of on demand and spot instances.

https://wo.wetteronline.de

The presentation page on my company. Apart from transferring it to the cloud (by making use of cdk to code our infrastructure) I also helped out our application team with configuring their wordpress solution. Apart from introducing redundancy, autoscaling and monitoring one big part was tweaking the wordpress config, setting up the firewall and making use of EFS as shared webserving filesystem. To safe on cost we made use an mixed instance fleed of on demand and spot instances.

https://www.wetteronline.de/home/wlan-wetterstation

Our webshop where we offer our weather device had to be transferred to the cloud as well. The infrastructure very much resembles the ones mentioned above. All infrastructures are monitored by modern monitoring solutions with automatic notifcations and problem mitigations.

Recent AWS Projects

• Defining IAM roles and policies for users and groups
• Rolling out control tower for aws account management via organizations
• Cloudformation based DNS management via hosted zones
• Cdk based web-stacks including cloudfront cdn, loadbalancing, auto scaling groups, databases and monitoring
• AWS compliance checks via aws config
• Transforming web-stacks (ec2 based) to ecs (fargate) leveraging gitlab CICD for continous updates
• ETL based kubernetes project

AWS Monitoring, Administration and Training

We have dozens of developers working with AWS. I developed some lambda functions (python, boto3) to do jobs like:

• Find unused cli keys or users without MFA enabled
• Find unsed security groups
• Post aws health messages to our slack channel
• Find old amazon machine images (cost saving)
• Set log retention period for new log groups to 2 weeks (cost saving)
• Post over-/underutilized resources to Slack via AWS Compute Analyzer

We have some 200 domains at my company spread over quite a few DNS registrants. To safe on costs and for easier administration these were transferred to AWS as well (with some exceptions as AWS does not support every top level domain).

In my company i give training lessons on current topics. Recent workshops included the following topics:

• Introduction to AWS
• Serverless Framework for AWS
• Cloud Development Kit for AWS (python)
• Leveraging ECS on AWS
• Running Kubernetes clusters on AWS