01
AWS INFRASTRUCTURE
IAM · EC2 · S3 · VPC · Security Groups · ALB · Auto Scaling · RDS · EBS · EFS · DynamoDB · CloudWatch · Route 53
AWS
Direction is more Important than your speed. WELCOME TO MY PORTFOLIO
OPEN TO CLOUD / DEVOPS OPPORTUNITIES
NITHISHKUMAR K
ASPIRING CLOUD & DEVOPS ENGINEER
Final-year B.Tech IT student building practical AWS infrastructure, Linux deployments, container workflows and repeatable cloud automation.
AWS ✦ LINUX ✦ DOCKER ✦ NGINX ✦ CLOUDFORMATION ✦ VPC ✦ IAM ✦ PYTHON ✦ SQL ✦ GIT ✦ DEVOPS ✦ CLOUD SECURITY ✦
AWS ✦ LINUX ✦ DOCKER ✦ NGINX ✦ CLOUDFORMATION ✦ VPC ✦ IAM ✦ PYTHON ✦ SQL ✦ GIT ✦ DEVOPS ✦ CLOUD SECURITY ✦
01 / ABOUT
I LEARN CLOUD
BY BUILDING IT.
I focus on hands-on cloud engineering: architecture, deployment, networking, security, automation, monitoring and troubleshooting.
My projects are designed to show how a system works — not only the final screenshot. Every important build includes the architecture flow, security decisions, deployment evidence and what I learned from the implementation.
EDUCATIONB.Tech Information TechnologyMahendra Engineering College · 2023–2027
CGPA7.75 / 10Final-year student
CAREER DIRECTIONCloud / AWS / DevOpsInternship & entry-level roles
02 / TECHNICAL STACK
TECHNICAL STACK
STACK
Tools are grouped by the engineering problem they solve — not by decorative skill percentages.
02
DEVOPS & SYSTEMS
Linux · Docker · Nginx · Git · GitHub · YAML · Infrastructure as Code · CI/CD fundamentals · server troubleshooting
OPS
03
INFRASTRUCTURE AS CODE
AWS CloudFormation · reusable YAML templates · stack lifecycle · outputs · automated EC2 configuration
IAC
04
NETWORKING
TCP/IP · DNS · HTTP/HTTPS · public/private subnets · routing · load balancing · security-group traffic flow
NET
05
PROGRAMMING & DATA
Python fundamentals · SQL · PostgreSQL · Oracle Database · Bash/PowerShell deployment automation
CODE
06
CLOUD SECURITY
IAM permissions · least privilege · private network design · secure administration · security groups · Zero Trust concepts
SEC
03 / SELECTED WORK
REAL BUILDS. REAL LEARNING. - PROJECTS
EXPLAIN THEMSELVES.
The architecture is part of the project story. Animated request paths show where traffic, control and data actually move.
01
ARCHITECTURE IN PROGRESS
HIGHLY AVAILABLE
3-TIER AWS
Production-inspired multi-AZ design with an internet-facing ALB, private application tier, Auto Scaling, private RDS database tier, controlled outbound connectivity, IAM and monitoring.
VPCALBASGEC2RDSCLOUDWATCH
COMPLETE REQUEST + NETWORK + APP + DB FLOWANIMATED
USER→IGW→ALB→PRIVATE EC2 / ASG→RDS
+ IAM / CLOUDWATCH / S3 / NAT
02COMPLETED + VERIFIED
EC2 + NGINX
HOSTING
Real Amazon EC2 deployment using Amazon Linux, Nginx, Security Groups, SSH, Git and shell automation with HTTP validation.
EC2LINUXNGINXSSHBASH
RUNTIME + SECURE ADMINISTRATIONHTTP 80 / SSH 22
BROWSER→SG :80→EC2→LINUX→NGINX→WEBSITE
03COMPLETED
DOCKERIZED
NGINX APP
Reproducible container workflow with a Dockerfile, Nginx Alpine image, host-to-container port mapping and health verification.
DOCKERNGINXALPINEHEALTHCHECK
BUILD PIPELINE + CONTAINER RUNTIME8080 : 80
SOURCE+DOCKERFILE→IMAGE→CONTAINER→NGINX→HEALTHY APP
04COMPLETED + VERIFIED
CLOUDFORMATION
INFRASTRUCTURE AS CODE
Reusable YAML provisions a complete Nginx web-server environment including network, routing, security, IAM, EC2 and automated User Data.
CLOUDFORMATIONYAMLVPCIAMSSM
PROVISIONING + RUNTIME + SECURE ADMIN11 RESOURCES
GIT→YAML→CLOUDFORMATION→11 AWS RESOURCES+SSM ADMIN
05COMPLETED
AMAZON S3
STATIC WEBSITE
Serverless static website hosting with S3 website configuration, index/error documents, bucket policy and public endpoint validation.
S3BUCKET POLICYSTATIC HOSTINGHTTP
STATIC WEBSITE REQUEST FLOWSERVERLESS
BROWSER→S3 WEBSITE ENDPOINT→BUCKET→INDEX / ERROR / ASSETS
06BACKEND PROJECT
SECURE RAG
FASTAPI BACKEND
Backend-only document retrieval system using FastAPI, chunking, embeddings and FAISS semantic search with source-grounded answer flow.
PYTHONFASTAPIFAISSEMBEDDINGSRAG
INGESTION + QUERY PIPELINESSEMANTIC RETRIEVAL
DOCS→CHUNKS→EMBEDDINGS→FAISS+QUERY→RETRIEVAL→ANSWER + SOURCES
04 / MAJOR PROJECT / RESEARCH
AI SECURITY × CLOUD SECURITY × ZERO TRUST
ACTIONSHIELD AI.
Intent-aware runtime validation for autonomous cloud agent actions against prompt injection. Every proposed cloud action is checked against the original user intent before execution.
01 / SOURCEUSER TASKOriginal trusted request
→
02 / UNDERSTANDINTENT ENGINEExtract task, resource, scope, constraints
→
03 / AGENTPROPOSED ACTIONTool / API / cloud operation
→
04 / VALIDATION LAYER
RUNTIME POLICY GATE
Permission?Needed for task?User asked?
Trusted source?Impact / risk?Simulation safe?
→
05 / DECISIONACTION SAFE?Intent alignment + policy result
MATCH + SAFEALLOWExecute approved cloud action
MISMATCH / HIGH RISKBLOCKStop action + alert / explain reason
ALWAYSAUDIT & MONITORCloudWatch / logs / action trace / evidence
ORIGINAL TASK→INTENT→AGENT ACTION→6 VALIDATIONS→ALLOW / BLOCK→AUDIT
05 / ENGINEERING PRINCIPLES
The standards I follow while building cloud infrastructure, automating deployments and securing applications.
PRINCIPLES
DESIGN FOR FAILURE
Design around availability, health checks, isolation and recovery instead of assuming components never fail.
AUTOMATE EVERYTHING
Use scripts and Infrastructure as Code where repeatability improves speed, consistency and documentation.
SECURITY FIRST
Prefer least privilege, restricted administration, private tiers and explicit traffic flow over broad access.
VERIFY & MONITOR
A deployment is not complete until service health, HTTP response, network access and cleanup are validated.
06 / CLOUD JOURNEY
FROM ZERO TO CLOUD
PROGRESSION.
No fake percentage bars. This timeline shows the direction of practical learning.
FOUNDATION
NETWORKING + LINUX
HTTP, DNS, TCP/IP, processes, services, logs and shell fundamentals.
AWS CORE
IAM / EC2 / S3
Identity, compute, static hosting, permissions and deployment validation.
NETWORK DESIGN
VPC / SUBNETS / SECURITY
Public/private tiers, route paths, Security Groups, load balancing and database isolation.
DEVOPS
DOCKER / NGINX / GIT
Containerized web deployment, Linux hosting, version control and troubleshooting.
AUTOMATION
CLOUDFORMATION / YAML
Repeatable resource provisioning, User Data, outputs and controlled cleanup.
NEXT DEPTH
CLOUD SECURITY + DEVOPS
Runtime security, CI/CD, stronger monitoring, Terraform and production-style systems.
07 / CRED LIBRARY
CERTIFICATES, BADGES
& LEARNING PROOF.
AWS training certificates, digital badges and verified database learning credentials collected in one place.
08 / EDUCATION & PARTICIPATION
B.TECH
INFORMATION TECHNOLOGY
Mahendra Engineering College, Mallasamuthram, Tamil Nadu
CGPA · 7.75 / 10DATA QUEST 2025
Technical event — PSG iTech and Applied Research
NATIONAL-LEVEL CONFERENCE
Emerging AI, ML and Computing
SINTHAN'AI 26
24-hour hackathon — Erode Sengunthar Engineering College
09 / CONTACT
LOOKING FOR A CLOUD / DEVOPS INTERN OR JUNIOR ENGINEER?