Cloud

Map application-layer AWS resources (ECS, Lambda, ALB, API Gateway) and write a topology to AWS_STATE_DIR.

Query current AWS billing data and identify top cost drivers using Cost Explorer.

Enumerate AWS compute, storage, network, and IAM resources and write a structured inventory to AWS_STATE_DIR.

Evaluate IAM posture, public exposure, and security service status of the current AWS account.

Design, deploy or troubleshoot a workload on Google Cloud with clear cost and operational constraints.

Sizes TCO and cloud migration waves using Google Cloud Migration Center discovery exports and right-sizing heuristics.

Amazon Aurora MySQL — creates, modifies, and advises on Aurora MySQL clusters specifically (MySQL-compatible engine, Aurora serverless, parallel query).

Amazon Aurora PostgreSQL — creates, modifies, and advises on Aurora PostgreSQL clusters specifically (PostgreSQL-compatible engine, Aurora serverless, express…

Activate when developers have latent caching needs: slow API responses, database read bottlenecks, DynamoDB throttling or cost, RDS/Aurora scaling pressure…

Build and deploy full-stack web and mobile apps with AWS Amplify Gen2 (TypeScript code-first).

Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions, and CloudWatch…

Builds resilient, long-running, multi-step applications with AWS Lambda durable functions with automatic state persistence, retry logic, and orchestration for…

Guides the end-to-end AWS resilience lifecycle integrating Resilience Hub v2, Fault Injection Service, and Application Recovery Controller.

AWS SDK for JavaScript v3 development patterns.

AWS SDK for Python (boto3/botocore) development patterns.

Configures Amazon CloudFront content delivery across six workflows: when to use CloudFront and how it fits with AWS WAF, Shield, CloudFront Functions…

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink.

Connects an existing AWS Lambda function to Amazon API Gateway by creating a REST or HTTP API with resource/method setup, Lambda proxy integration…

Connects an AWS Lambda function to DynamoDB with IAM roles, stream event source mapping, and read/write permissions.

Creates an API Gateway stage with CloudWatch logging, X-Ray tracing, throttling, WAF integration, and IAM roles following AWS best practices.

Creates a production-ready VPC with public and private subnets across multiple Availability Zones, including internet gateway, NAT gateways, route tables, and…

Creates and manages secrets in AWS Secrets Manager following security best practices.

Debugs AWS Lambda function timeout failures by systematically analyzing function configuration, CloudWatch logs and metrics, VPC/networking, cold starts…

Deploys a Regional REST API with a custom domain name, a Lambda backend function, and a request-based Lambda authorizer using AWS CLI.