Networking
VPC designs, Transit Gateway, VPN configs, Route53 setups, and load balancer configurations.
Available Assets
Cloudflare Access Policy Pack
Pre-built Terraform configs for Cloudflare Zero Trust Access—protect Grafana, Gitea, pgAdmin with email OTP, GitHub SSO, and service token policies.
cloudflared Systemd Service Pack
Hardened systemd units & idempotent installer for cloudflared tunnels on Ubuntu/Debian/Raspberry Pi. Zero-config setup, auto-updates, security hardening.
Hub and Spoke Transit Gateway Stack
CloudFormation: Transit Gateway with a shared services VPC, workload VPC attachments, and isolated route tables per environment.
AWS Client VPN Stack
CloudFormation: Client VPN endpoint with mutual certificate authentication, split-tunnel configured to only route AWS traffic, CloudWatch connection logging.
Route53 Private Hosted Zone Stack
CloudFormation: private hosted zone associated across multiple VPCs, Route53 Resolver rules for on-premises DNS forwarding, and Resolver endpoint configuration.
VPC Peering Automation Script
Bash and AWS CLI script that creates bidirectional VPC peering including route table entries and security group rules in both VPCs. Idempotent and safe to re-run.
AWS Network Firewall Baseline Stack
CloudFormation: Network Firewall in a dedicated inspection VPC with stateful rules for common threat categories and CloudWatch logging for all rule matches.
ALB with WAF and ACM Stack
CloudFormation: Application Load Balancer with WAF attached, automated ACM certificate, HTTP to HTTPS redirect rule, and S3 access logging pre-configured.
Cloudflare Tunnel and Zero Trust Config
Terraform: Cloudflare Tunnel exposing internal services with Zero Trust access policies and identity provider integration. No inbound firewall rules required on your servers.
AWS PrivateLink Service Stack
CloudFormation: expose an internal service via PrivateLink with Network Load Balancer, endpoint service configuration, and consumer endpoint in a separate VPC.
Route53 DNS Failover Stack
CloudFormation: Route53 health checks with primary and secondary failover records, SNS alert when failover activates, and automatic recovery detection.
VPC Endpoints Pack
CloudFormation: deploys Interface and Gateway VPC Endpoints for S3, DynamoDB, SSM, Secrets Manager, ECR API, ECR DKR, and CloudWatch Logs in a single stack.